pencil-ui-design-system-echarts
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were identified. The skill correctly utilizes MCP tools for design automation and provides clear instructions for setting up visualization components.
- [EXTERNAL_DOWNLOADS]: The skill references official ECharts documentation and theme builders hosted on Apache Software Foundation domains (echarts.apache.org), which is a well-known and trusted service.
- [PROMPT_INJECTION]: The instructions follow best practices for task-specific orchestration and do not attempt to bypass safety filters or override agent constraints.
- [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration to untrusted domains were detected. The skill primarily focuses on internal design variable configuration.
- [CREDENTIALS_UNSAFE]: The documentation explicitly warns against hardcoding sensitive information in environment variables, following standard security best practices.
Audit Metadata