skills/microsoft/rayfin/visuals/Gen Agent Trust Hub

visuals

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • Use of Vendor-Owned Resources: The skill relies on several packages from the @microsoft scope, specifically @microsoft/fabric-visuals, @microsoft/fabric-datagrid, and @microsoft/fabric-visuals-core. These are official libraries provided by the skill's author to support its intended visualization functionality.
  • Secure Data Rendering Practices: The documentation for the DataGrid component includes examples for rendering dynamic content from data. Notably, the example for rendering clickable URLs correctly implements rel="noopener noreferrer" for external links, which is a standard security practice to mitigate security risks associated with cross-origin navigation.
  • Structured Data Processing: The skill uses a well-defined DataTable schema to process information. By encouraging the use of structured data and specialized components like VegaVisual, it provides a more controlled environment for data presentation than raw HTML generation.
  • Interactivity Handling: Interaction events (selections, clicks) are handled through a structured onInteraction API that uses predicates rather than raw data strings, which helps maintain a clear boundary between the visual components and the logic consuming their events.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:55 PM