data-report
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard front-end libraries and assets from well-known services.
- Fetches Chart.js from the JSDelivr CDN (cdn.jsdelivr.net).
- Loads Tailwind CSS from its official CDN (cdn.tailwindcss.com).
- Retrieves typography from Google Fonts (fonts.googleapis.com).
- [DATA_INGESTION]: The skill is designed to process and visualize external data provided by the user, representing an indirect prompt injection surface.
- Ingestion points: User-provided CSV, Excel, and JSON data sources as specified in SKILL.md.
- Boundary markers: Absent; the skill does not explicitly instruct the agent to use delimiters or warnings for processed data.
- Capability inventory: Client-side JavaScript execution (via Chart.js) and HTML rendering.
- Sanitization: No explicit sanitization or validation of the input data content is mentioned before interpolation into the HTML template.
Audit Metadata