chart-visualization
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML templates and documentation reference established visualization libraries hosted on well-known Content Delivery Networks (CDNs), such as Plotly from
cdn.plot.lyand ECharts fromcdn.jsdelivr.net. - [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/render_examples.py) used to generate sample visualization files. This script uses only standard Python libraries and performs file operations restricted to a user-defined output directory, which is consistent with its documented purpose. - [PROMPT_INJECTION]: The skill processes research data to generate visualizations, creating a theoretical surface for indirect prompt injection. However, the provided implementation script addresses this by using HTML escaping (
html.escape) to sanitize data labels, minimizing the risk of malicious content being rendered in the resulting artifacts.
Audit Metadata