visuals
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- Use of Vendor-Owned Resources: The skill relies on several packages from the
@microsoftscope, specifically@microsoft/fabric-visuals,@microsoft/fabric-datagrid, and@microsoft/fabric-visuals-core. These are official libraries provided by the skill's author to support its intended visualization functionality. - Secure Data Rendering Practices: The documentation for the
DataGridcomponent includes examples for rendering dynamic content from data. Notably, the example for rendering clickable URLs correctly implementsrel="noopener noreferrer"for external links, which is a standard security practice to mitigate security risks associated with cross-origin navigation. - Structured Data Processing: The skill uses a well-defined
DataTableschema to process information. By encouraging the use of structured data and specialized components likeVegaVisual, it provides a more controlled environment for data presentation than raw HTML generation. - Interactivity Handling: Interaction events (selections, clicks) are handled through a structured
onInteractionAPI that uses predicates rather than raw data strings, which helps maintain a clear boundary between the visual components and the logic consuming their events.
Audit Metadata