d3-visualization

Warn

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill metadata and documentation direct the user to clone a full set of workflows, scripts, and assets from an external repository located at https://github.com/jiannanya/snow-d3.git. This source is not recognized as a trusted organization or well-known service.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external datasets (e.g., sales data, network graphs) to generate D3.js visualizations, which presents a surface for indirect prompt injection attacks.
  • Ingestion points: Data provided by the user or fetched by the agent to create "zoomable treemaps", "force-directed network graphs", and other visualizations described in the file.
  • Boundary markers: None identified in the provided instructions; there are no explicit delimiters or instructions to ignore embedded content within processed data.
  • Capability inventory: The agent acts as an expert-level D3.js code generator, potentially executing or rendering code based on the visualization requirements.
  • Sanitization: No evidence of sanitization, validation, or filtering of the input data is provided in the skill instructions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 14, 2026, 08:21 PM
Security Audit — agent-trust-hub — d3-visualization