skills/g1joshi/agent-skills/plotly/Gen Agent Trust Hub

plotly

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides documentation and instructional code for the Plotly library, a standard tool for interactive visualization. The instructions align with documented best practices for the library.
  • [EXTERNAL_DOWNLOADS]: The skill fetches sample financial data from Plotly's official GitHub repository to demonstrate candlestick chart functionality. This is a standard practice for visualization tutorials and utilizes a well-known service for data hosting.
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface by ingesting external data, which is inherent to the visualization process.
  • Ingestion points: pd.read_csv loads data from a GitHub URL in SKILL.md.
  • Boundary markers: Absent.
  • Capability inventory: fig.write_html allows writing interactive visualizations to the local file system in SKILL.md.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 03:37 AM