lov-professional-infographic

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill relies on the well-known playwright library to automate Chromium for rendering HTML/SVG content into PNG images. This is a standard and legitimate use of browser automation for the skill's primary purpose.
  • [SAFE]: The Python implementation in infographic_cli.py includes robust input sanitization by using html.escape() for all user-controllable fields (such as titles and recommendations) before interpolating them into the HTML templates, effectively mitigating injection risks.
  • [SAFE]: Configuration and brand profiles are handled through dedicated JSON files and environment variables, encouraging best practices for secret management by avoiding hardcoded credentials.
  • [SAFE]: The skill's workflow includes an automated audit process that checks for semantic completeness and structural integrity, ensuring that the generated output meets quality standards without introducing hidden or malicious content.
  • [SAFE]: All identified external resources and dependencies originate from trusted organizations and well-known services. The use of Base64 is limited to legitimate data URI embedding for brand logos within the generated Exhibits.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 08:50 AM
Security Audit — agent-trust-hub — lov-professional-infographic