genomics-viz
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structural guidance for visualization creation and documentation within a static site framework. It does not perform network operations, access sensitive user credentials, or execute arbitrary system commands.
- [EXTERNAL_DOWNLOADS]: The skill references the use of the well-known D3.js library (v7) and color palettes (Okabe-Ito, Viridis). These are standard tools for data visualization and are intended to be hosted locally within the project's assets, posing no security risk.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from 'evergreen notes' to generate visualizations. While this represents a data ingestion surface, the risk is mitigated by mandatory review loops involving secondary agents (cognitive-design-architect) and a final human approval step ('proposes; the author approves').
- [DYNAMIC_EXECUTION]: The skill mentions simulating genetics data with seeded models. This data generation is handled via local scripts for reproducibility and the output is intended to be static JSON, which is a safe practice for client-side visualizations.
Audit Metadata