chart-clarity

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety guidelines were detected. The instructions are strictly focused on data visualization best practices.
  • [DATA_EXFILTRATION]: No sensitive file access or unauthorized network operations were found. The skill references external assets (fonts and scripts) from well-known, trusted services like jsDelivr and GitHub for its documentation and interactive demo.
  • [OBFUSCATION]: No obfuscated code, hidden characters, or encoding techniques (like Base64 or hex) were used to conceal malicious intent.
  • [REMOTE_CODE_EXECUTION]: The skill provides code snippets and templates for visualization libraries. It does not attempt to execute arbitrary shell commands or fetch/execute remote scripts through dangerous patterns like piping curl to bash.
  • [COMMAND_EXECUTION]: No unauthorized subprocess spawning or system command execution patterns were identified in the provided scripts or instructions.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or other secrets were found. The skill appropriately suggests standard practices for configuration.
  • [EXTERNAL_DOWNLOADS]: The skill references established libraries and fonts from well-known tech services (jsDelivr, Google Fonts). These are legitimate resources required for the skill's visualization functionality.
  • [DYNAMIC_EXECUTION]: While the skill includes script generation logic for visualizations (e.g., SVG sparkline generators), these are standard client-side implementation patterns and do not involve unsafe deserialization or execution of untrusted external input.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 05:19 AM
Security Audit — agent-trust-hub — chart-clarity