interactive-dashboard-builder
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML templates reference Chart.js and a date-fns adapter from cdn.jsdelivr.net. These are well-known technology services. The templates include Subresource Integrity (SRI) hashes (sha384-...) for these script tags, which is a security best practice that prevents the execution of tampered code.
- [SAFE]: No prompt injection patterns, hidden commands, or obfuscated contents were identified. The skill's behavior is consistent with its stated purpose of generating interactive data dashboards.
- [SAFE]: The skill provides a template for data ingestion via an embedded array. While the generated table code uses innerHTML—a potential surface for Cross-Site Scripting (XSS) if untrusted data is displayed—this is a common implementation pattern for simple dashboard templates and does not constitute malicious behavior by the skill itself.
Audit Metadata