tw-research-viz
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied research data to generate visualizations, creating a potential surface for indirect injection.
- Ingestion points: User-provided research topics, element descriptions, and relationship definitions defined in Step 1 of
SKILL.md. - Boundary markers: The instructions lack specific delimiters or instructions to the agent to treat interpolated user data as non-executable text.
- Capability inventory: The skill has access to
Bashfor running Python scripts,Writefor saving output files, and theExcalidrawMCP for rendering diagrams. - Sanitization: There are no explicit validation or sanitization steps identified in the instructions or scripts for the user-provided labels and descriptions.
- [DYNAMIC_EXECUTION]: The skill dynamically generates and executes code to produce visualizations.
- Script generation: Step 8 of
SKILL.mdprovides a Python template for generatingmatplotlibcharts based on research data, and the skill invokesscripts/generate_prisma.pyto render PRISMA diagrams. - Interactive output: The skill constructs JSON structures at runtime to invoke the
Excalidraw:create_viewtool for interactive diagram editing.
Audit Metadata