chart-image
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements its core charting functionality using reputable libraries and follows established patterns for CLI tools. No malicious behavior, obfuscation, or unauthorized data collection was detected.\n- [COMMAND_EXECUTION]: The
scripts/chart.mjsscript is called via the command line. Potential command injection risks are mitigated by theCAPABILITY.mdfile, which explicitly directs the agent to use structured process execution and avoid shell-based string interpolation.\n- [PROMPT_INJECTION]: The skill processes untrusted data for visualization. Ingestion points: Data is received through CLI flags inscripts/chart.mjs. Boundary markers: Safety instructions inCAPABILITY.mddefine secure interaction patterns. Capability inventory: The script performs file read/write operations for data input and image output. Sanitization: Input data is parsed through standard JSON and CSV parsers.
Audit Metadata