chart-clarity
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety guidelines were detected. The instructions are strictly focused on data visualization best practices.
- [DATA_EXFILTRATION]: No sensitive file access or unauthorized network operations were found. The skill references external assets (fonts and scripts) from well-known, trusted services like jsDelivr and GitHub for its documentation and interactive demo.
- [OBFUSCATION]: No obfuscated code, hidden characters, or encoding techniques (like Base64 or hex) were used to conceal malicious intent.
- [REMOTE_CODE_EXECUTION]: The skill provides code snippets and templates for visualization libraries. It does not attempt to execute arbitrary shell commands or fetch/execute remote scripts through dangerous patterns like piping curl to bash.
- [COMMAND_EXECUTION]: No unauthorized subprocess spawning or system command execution patterns were identified in the provided scripts or instructions.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or other secrets were found. The skill appropriately suggests standard practices for configuration.
- [EXTERNAL_DOWNLOADS]: The skill references established libraries and fonts from well-known tech services (jsDelivr, Google Fonts). These are legitimate resources required for the skill's visualization functionality.
- [DYNAMIC_EXECUTION]: While the skill includes script generation logic for visualizations (e.g., SVG sparkline generators), these are standard client-side implementation patterns and do not involve unsafe deserialization or execution of untrusted external input.
Audit Metadata