who-growth-charts
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official Excel reference data and branding assets from the World Health Organization (WHO) content delivery network (
cdn.who.int) to calculate growth percentiles and format charts. - [COMMAND_EXECUTION]: Executes the
scripts/growth_chart.pyscript usingpython3to perform data analysis and image generation. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Ingests child measurement data (height, weight, BMI) from local JSON files through the
--dataparameter inscripts/growth_chart.py. - Boundary markers: Uses a
_safe_input_pathfunction to verify that input paths are restricted to the local workspace or temporary system directories. - Capability inventory: The script has the capability to perform network requests via
urllib.request(limited to specific WHO URLs) and write visualization files to the local filesystem usingmatplotlib. - Sanitization: Implements
_safe_filenameusing regular expressions to remove special characters and path separators from user-supplied names, preventing directory traversal and filename injection.
Audit Metadata