chart
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Chart.js library from Cloudflare's well-known CDN (cdnjs.cloudflare.com). This is a standard and safe practice for web-based data visualization.
- [COMMAND_EXECUTION]: The skill uses browser automation tools (
new_page,navigate_page,take_screenshot) to render locally generated HTML files. These operations are scoped to/tmp/chart.htmland are consistent with the skill's primary purpose of data visualization. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user data to populate chart labels and datasets. While this is an ingestion surface, the data is interpolated into a controlled HTML template used for rendering, and the skill includes specific rendering instructions to ensure output consistency. The risk is assessed as safe given the intended use case and typical browser sandbox environments.
- [DATA_EXPOSURE]: The skill operates on user-supplied data to generate local visualizations. No evidence was found of accessing sensitive files, environment variables, or hardcoded credentials. All network operations are directed at the official Chart.js CDN.
Audit Metadata