frame-data-chart-nyt
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design assets and styling libraries from well-known and trusted services, including Google Fonts (
fonts.googleapis.com) and the Tailwind CSS CDN (cdn.tailwindcss.com). These are standard practices for web development and do not represent a security risk. - [COMMAND_EXECUTION]: No shell commands or subprocess executions were found. The skill operates entirely within a browser-like environment for rendering HTML/SVG content.
- [DATA_EXFILTRATION]: There are no network requests directed at unknown or untrusted domains. The only network operations are for fetching static assets (fonts and CSS) from reputable sources.
- [PROMPT_INJECTION]: The instructions are focused on layout and design constraints. There are no attempts to override system prompts or bypass safety filters.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided data (CSV/JSON), it does so by interpolating it into SVG/HTML for rendering. The instructions include guidelines for data handling, and there is no evidence of an attack surface for code execution from the input data.
Audit Metadata