frame-data-rollup
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected in the source code or metadata.
- [DATA_EXFILTRATION]: The skill is designed for offline-deterministic rendering. It utilizes a system font stack and avoids all network operations (no fetch, curl, or external asset loading), preventing data exfiltration.
- [COMMAND_EXECUTION]: There is no evidence of subprocess spawning, shell command execution, or usage of dangerous functions like eval().
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data (labels and values) for rendering in a video frame. The data is sanitized (converted to finite numbers) and used strictly for visual layout, presenting no risk of downstream instruction injection.
Audit Metadata