plotly
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and instructional code for the Plotly library, a standard tool for interactive visualization. The instructions align with documented best practices for the library.
- [EXTERNAL_DOWNLOADS]: The skill fetches sample financial data from Plotly's official GitHub repository to demonstrate candlestick chart functionality. This is a standard practice for visualization tutorials and utilizes a well-known service for data hosting.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface by ingesting external data, which is inherent to the visualization process.
- Ingestion points:
pd.read_csvloads data from a GitHub URL inSKILL.md. - Boundary markers: Absent.
- Capability inventory:
fig.write_htmlallows writing interactive visualizations to the local file system inSKILL.md. - Sanitization: Absent.
Audit Metadata