data-visualization
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data inputs such as DataFrames, CSV files, and Newick phylogenetic trees (
Tree.nwk) as described inchart-recipes.mdanditol-reference.md. - Ingestion points: Data ingestion occurs through variable interpolation (e.g.,
df) and file system reads of user-supplied data files. - Boundary markers: No explicit boundary markers or instructions to ignore embedded prompts within the data are present.
- Capability inventory: The skill is configured with
Bash,Read,Grep, andGlobtools, and its scripts execute file-write operations (plt.savefig). - Sanitization: There is no evidence of sanitization or escaping of data-derived strings (e.g., species labels) before they are rendered in plots or used in shell searches.
- [EXTERNAL_DOWNLOADS]: The documentation references official scientific resources including
matplotlib.org,seaborn.pydata.org,itol.embl.de, andcolorbrewer2.org. These are well-known, trusted domains for academic and scientific visualization tools. - [COMMAND_EXECUTION]: The skill uses shell utilities like
grep(to extract species names from tree files) andidentify(to verify image dimensions), which are standard operations for the skill's visualization and export tasks.
Audit Metadata