gantt-chart-builder
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/gantt_generator.pyinteracts with the file system only to read the input JSON data and write the generated HTML report. These operations are restricted to the paths provided via command-line arguments. - [PROMPT_INJECTION]: The skill processes external JSON data (tasks and project details) and interpolates it into a generated HTML document. The implementation includes robust sanitization using standard HTML escaping (
_esc) and JSON serialization (_safe_json_for_html) to mitigate potential cross-site scripting (XSS) or indirect injection vulnerabilities in the output file.
Audit Metadata