infographics
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_infographic.pyutilizessubprocess.run()to invoke the core generation logic contained inscripts/generate_infographic_ai.py. This modular approach is standard for CLI wrappers and does not involve shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill makes legitimate API calls to
openrouter.aito utilize external AI capabilities for research and image generation. As these target a well-known service essential for the skill's functionality, they are categorized as safe operations. - [DATA_EXFILTRATION]: Prompts and metadata are transmitted to the OpenRouter API. This behavior is documented and necessary for the intended purpose of the infographic generation service.
- [SAFE]: No evidence of credential harvesting, persistence mechanisms, or obfuscated malicious code was found during the analysis of the Python scripts or markdown reference files.
Audit Metadata