mathmodel-figure-templates
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, data exfiltration attempts, or security vulnerabilities were detected. The skill is specialized for scientific plotting and operates within a local environment using synthetic data.
- [COMMAND_EXECUTION]: The renderer script (
render_template.py) executes bundled Python scripts usingsubprocess.run. This is implemented securely by passing arguments as a list (avoiding a shell) and selecting script paths from a hardcoded, static dictionary, which prevents any possibility of command injection or path traversal via user-supplied template names.
Audit Metadata