Data Visualization

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions define a method for consistent and accessible data visualization. No prompt injection, obfuscation, or malicious patterns were detected.
  • [SAFE]: The included validation scripts (scripts/validate_palette.js and scripts/validate_palette.py) perform local calculations using the OKLab and OKLCH color spaces. They do not utilize any network or file system operations and include robust hex color validation.
  • [SAFE]: The skill promotes defensive security practices for handling untrusted data. It identifies that visualization labels sourced from external inputs (e.g., CSV headers, API responses) should be treated as untrusted and requires the use of textContent instead of innerHTML to prevent cross-site scripting (XSS). Ingestion points: CSV headers, API responses, tool output. Capability inventory: HTML/SVG rendering. Sanitization: usage of textContent or createTextNode instead of innerHTML.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 12:42 PM
Security Audit — agent-trust-hub — Data Visualization