light-figure-drawing
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the Graphviz
dotbinary viasubprocess.runwithinexamples/example_framework_render.pyto render framework diagrams. Additionally, the documentation describes the use of established command-line tools such asinkscape,mermaid-cli, anddrawiofor specialized figure manipulation and export. - [EXTERNAL_DOWNLOADS]: The skill references several well-known scientific software packages and Python dependencies, including
matplotlib,seaborn,plotly,altair,kaleido,vl-convert-python,colorspacious,pypdf, andPillow. These are standard and trusted tools used throughout the research and data science communities. - [PROMPT_INJECTION]: A review of the instructional content and skill metadata revealed no evidence of prompt injection or attempts to override the AI agent's safety parameters.
- [DATA_EXFILTRATION]: No unauthorized access to sensitive system files or unexpected network operations were detected. Mentions of
curlin the documentation strictly refer to the verification of official publication standards from well-known scientific journals.
Audit Metadata