scientific-figure
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto interface with the Inkscape binary for high-fidelity PDF and PNG exports. The implementation uses a list of arguments and shell execution is disabled, adhering to secure practices for calling external utilities. - [EXTERNAL_DOWNLOADS]: The skill uses the
uvpackage manager to dynamically load reputable scientific libraries such assvgutils,lxml,cairosvg, andmatplotlib. These dependencies are standard for scientific plotting and are sourced from official package registries. - [SAFE]: Extensive analysis across all threat categories reveals no indicators of prompt injection, data exfiltration, or obfuscation. The codebase follows standard conventions for scientific software development and uses local file operations strictly for figure composition.
Audit Metadata