d3
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for D3.js visualization. It follows established development patterns, uses official documentation, and does not exhibit any malicious behaviors such as obfuscation, credential theft, or unauthorized persistence.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and instructional content from official D3.js and Observable sources (d3js.org and observablehq.com). These are trusted organizations within the data visualization ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and documents surfaces for processing untrusted external data files (CSV, JSON, DSV) using d3-fetch. Evidence: 1. Ingestion points: Loading methods like d3.csv() and d3.json() (described in references/setup-data-scales.md). 2. Boundary markers: Relies on standard parsing boundaries for structured data formats. 3. Capability inventory: Data transformation, mathematical scaling, and SVG/Canvas generation (described in references/selection-interaction.md). 4. Sanitization: Recommends standard data coercion via d3.autoType.
Audit Metadata