datavis
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected. The skill's functionality is consistent with its stated purpose as a data visualization development tool.
- [COMMAND_EXECUTION]: The skill includes several Python scripts designed for command-line use:
scripts/analyze-distribution.py: Reads local CSV or JSON data files to provide statistical analysis and D3.js scale recommendations.scripts/color-palette.py: Generates color codes for various visualization types (sequential, categorical, etc.) based on user input.scripts/d3-scaffold.py: Creates local project directories and writes boilerplate HTML/CSS/JS files for common visualization types (force-network, timeline, etc.).- [EXTERNAL_DOWNLOADS]: The project scaffolding script (
d3-scaffold.py) generates HTML that references the D3.js and TopoJSON libraries from official, well-known CDN domains (d3js.org and jsdelivr.net). These are standard industry practices for web-based visualizations.
Audit Metadata