project-dashboard
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill generates an HTML dashboard that loads the Chart.js library from Cloudflare's CDN (cdnjs.cloudflare.com). This is a well-known and trusted service used for data visualization.
- [PROMPT_INJECTION]: The skill processes project intelligence data from multiple local JSON files to generate a dashboard. This creates a surface for indirect prompt injection (Category 8).
- Ingestion points: Reads from daily-report-data.json, project-config.json, schedule.json, and several other log files.
- Boundary markers: Not explicitly defined in the logic, though data is treated as structured JSON.
- Capability inventory: Generates a local HTML/JS file with a client-side query engine for data visualization.
- Sanitization: The reference template includes an esc() function that utilizes textContent for basic HTML escaping of embedded data.
Audit Metadata