mathmodel-figure-templates
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/render_template.pyutility usessubprocess.runto execute Python plotting scripts. The executed files are internal templates bundled with the skill, used to generate visualization artifacts as part of its primary functionality. - [DYNAMIC_EXECUTION]: The skill manages the lifecycle of visualization generation by copying internal scripts from its
scripts/templates/directory to a user-defined project folder and executing them. The process includes input normalization via regex (re.sub(r"[^a-z0-9\-]+", "-", value)) and validation against a hardcoded whitelist of supported template IDs, ensuring that only intended scripts are executed.
Audit Metadata