gantt-chart-generator
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill processes project schedule data from external files (CSV, TSV, JSON) to generate visualizations. While this is the primary function, processing untrusted input is a point of consideration.\n
- Ingestion points: Data is loaded from CSV, TSV, or JSON files provided to the
gantt()function inscripts/gantt.py.\n - Boundary markers: The instructions do not include explicit markers to differentiate between user instructions and data content within the processed files.\n
- Capability inventory: The skill possesses file-writing capabilities to save the resulting Gantt charts to the local file system.\n
- Sanitization: The implementation includes date parsing and integer casting, which provides structural validation for the input data.
Audit Metadata