figure-composer
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing user-provided data artifacts and data sources which presents a vulnerability to indirect prompt injection.
- Ingestion points: Data artifacts and data sources mentioned in the workflow steps in SKILL.md.
- Boundary markers: No delimiters or ignore instructions are defined for the processed data.
- Capability inventory: The skill workflow involves rendering figures and saving files (figure, data, generation code), creating a path for malicious data to influence output.
- Sanitization: There is no requirement for sanitization or validation of the input data sources.
Audit Metadata