portaljs-add-chart
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: Fetches its primary operational workflow from the vendor's GitHub repository at https://github.com/datopian/portaljs/blob/main/.claude/commands/portaljs-add-chart.md. The agent is instructed to follow the instructions in this remote file as the authoritative source.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: Performs automated package installation using npm install recharts@^2.15.0 and executes npx tsc --noEmit to validate the generated TypeScript code.
- [INDIRECT_PROMPT_INJECTION]: Processes dataset manifests and external data files (CSV/TSV) to drive the component generation process.
- Ingestion points: Accesses datasets.json and various data files within the project's /public/data/ directory.
- Boundary markers: No specific delimiters or safety instructions are defined for processing the content of these data files.
- Capability inventory: Utilizes Write and Edit tools to create components and modify routes, and Bash for package management.
- Sanitization: Applies Number() coercion to data values intended for chart plotting, which acts as a basic filter for non-numeric content.
Audit Metadata