publication-chart-skill
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/ensure_publication_tooling.pyusessubprocess.runto execute package installation commands (piporuv). This behavior is restricted to the skill's primary dependencies, 'pubfig' and 'pubtab', as defined in the script'sDEFAULT_PACKAGESlist. - [EXTERNAL_DOWNLOADS]: The skill is designed to automatically download and install the 'pubfig' and 'pubtab' libraries from the Python Package Index (PyPI) if they are missing from the environment. This is a legitimate functional requirement for the skill's operation.
- [COMMAND_EXECUTION]: The script
scripts/ensure_publication_tooling.pyutilizesimportlib.import_moduleto dynamically verify the availability of the required toolsets. The library names are validated against a predefined whitelist before loading.
Audit Metadata