html-svg-diagrams
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on generating static visualization artifacts and explicitly mandates the use of
textContentanddocument.createElementinstead ofinnerHTMLto prevent Cross-Site Scripting (XSS) vulnerabilities. - [SAFE]: It restricts the use of browser storage (localStorage, IndexedDB) and limits external dependencies to trusted sources like Google Fonts, minimizing the potential attack surface.
- [SAFE]: The instructions do not contain any patterns associated with prompt injection, data exfiltration, persistence, or unauthorized command execution.
- [SAFE]: The skill follows established security principles for artifact generation within agent environments, emphasizing self-contained files with no external runtimes or build steps.
Audit Metadata