scroll-data-story-charts
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill architecture relies on the
STORY_DATAobject to dynamically update chart states, text annotations, and accessibility labels (aria-label) during scroll events. This creates a vulnerability surface if the skill is used to process untrusted data.\n - Ingestion points: The
data.jsfile and theSTORY_DATAobject serve as the primary entry points for data that drives the agent's visualization logic and descriptive metadata.\n - Boundary markers: The implementation lacks delimiters or explicit instructions to treat the embedded data as untrusted content.\n
- Capability inventory: The chart rendering logic in
chart.jshas the capability to modify the DOM and set accessibility attributes based on inputs, which could be leveraged to display malicious or deceptive content.\n - Sanitization: The template does not include sanitization routines or escaping mechanisms for data-driven strings before they are rendered into the UI or injected into
aria-labelattributes.
Audit Metadata