root-cause-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- Structured Report Generation: The skill generates a Fishbone diagram by populating a local HTML template with user-provided information. While this involves creating content that includes JavaScript (for diagram rendering), the skill uses a static, provided template rather than generating arbitrary code.
- Input Sanitization Best Practices: The instructions include a mandatory step to HTML-escape all user-derived text before it is inserted into the HTML template. This is a proactive security measure that mitigates the risk of indirect prompt injection or cross-site scripting (XSS) within the generated report file.
- Capability Constraints: The skill explicitly forbids the use of dynamic plotting libraries (like matplotlib) or generating diagrams from scratch, restricting the agent to modifying a known, local template. This reduces the attack surface for dynamic code generation.
Audit Metadata