lime-echart
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of educational content, API documentation, and code examples for data visualization.
- [EXTERNAL_DOWNLOADS]: The installation guide references official and well-known sources, including the DCloud plugin market and the standard
echartsnpm package. These references are documented neutrally as part of the setup process. - [CREDENTIALS_SAFE]: No hardcoded API keys, tokens, or sensitive credentials were detected. Templates and examples use generic placeholders (e.g.,
api.example.com) for demonstration purposes. - [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were found. Network operations shown in templates are standard HTTP requests for fetching chart data.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates ingesting external data via
uni.requestin files liketemplates/advanced-chart.md. While this establishes a standard data ingestion surface for visualization, it does not involve executing instructions from untrusted data or bypassing agent controls.
Audit Metadata