create-geo-charts
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process raw data from users or external research sources to generate complex HTML and SVG visualizations.
- Ingestion points: Raw data or research findings are requested from the user in
SKILL.mdStep 1. - Boundary markers: While the skill provides a strict design system and output template in
SKILL.mdSteps 3 through 8, it does not explicitly instruct the agent to ignore or sanitize embedded instructions within the ingested data. - Capability inventory: The agent is authorized to write files to the local filesystem and is specifically instructed to execute the
opencommand inSKILL.mdStep 9. - Sanitization: There are no documented sanitization or validation routines for external data processed by the skill.
- [COMMAND_EXECUTION]:
SKILL.mdexplicitly instructs the agent to execute a shell command to perform visual quality assurance. - Evidence: Step 9 of
SKILL.mddirects the agent to "Save the chart as an HTML file" and "Open it in the browser (useopencommand)". This pattern involves executing a local command on a file path generated by the agent, which may contain user-controlled data.
Audit Metadata