scientific-visualization
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes instructions and examples for processing external data (e.g., pandas DataFrames) to generate plots. While this represents a data ingestion surface, it is the primary intended function of the tool and is handled using standard scientific libraries without dangerous execution vectors.
- Ingestion points: The skill takes user-provided datasets as input for plotting functions in
SKILL.mdandreferences/matplotlib_examples.md. - Boundary markers: No specific delimiters or boundary instructions are included for untrusted data.
- Capability inventory: The skill is capable of writing files to the local file system (PDF, PNG, etc.) via
matplotlib.figure.Figure.savefig, as shown inscripts/figure_export.py. - Sanitization: The skill relies on standard library plotting logic and does not implement additional string sanitization for input data.
- [DYNAMIC_EXECUTION]: The script
scripts/style_presets.pycontains a functioncreate_style_templatethat writes a matplotlib style configuration file (.mplstyle) to the disk. This is a standard configuration task for visualization tools and does not involve executing arbitrary generated code. - [METADATA_POISONING]: A discrepancy exists between the author listed in the YAML frontmatter ('K-Dense Inc.') and the expected author context ('eturkes'). This appears to be a neutral branding choice rather than a deceptive or malicious pattern.
Audit Metadata