render-tufte-chart
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs data visualization tasks locally using provided data.
- [SAFE]: Python scripts use standard libraries and implement explicit input sanitization using HTML escaping to prevent cross-site scripting (XSS) in SVG and HTML outputs.
- [SAFE]: The
wrap_html.pyscript includes a defensive mechanism that scans SVGs for potentially dangerous active content (like script tags, event handlers, or SMIL animations) and refuses to process files that fail the check. - [SAFE]: No network access, hardcoded credentials, or unauthorized filesystem access was detected. Assets included with the skill, such as CSS and font files, are standard resources used for styling the output.
Audit Metadata