lov-professional-infographic
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill relies on the well-known
playwrightlibrary to automate Chromium for rendering HTML/SVG content into PNG images. This is a standard and legitimate use of browser automation for the skill's primary purpose. - [SAFE]: The Python implementation in
infographic_cli.pyincludes robust input sanitization by usinghtml.escape()for all user-controllable fields (such as titles and recommendations) before interpolating them into the HTML templates, effectively mitigating injection risks. - [SAFE]: Configuration and brand profiles are handled through dedicated JSON files and environment variables, encouraging best practices for secret management by avoiding hardcoded credentials.
- [SAFE]: The skill's workflow includes an automated audit process that checks for semantic completeness and structural integrity, ensuring that the generated output meets quality standards without introducing hidden or malicious content.
- [SAFE]: All identified external resources and dependencies originate from trusted organizations and well-known services. The use of Base64 is limited to legitimate data URI embedding for brand logos within the generated Exhibits.
Audit Metadata