build-report

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • Dynamic HTML Artifact Generation: The skill utilizes a specialized Python script (scripts/embed_html_report_runtime.py) to assemble self-contained HTML reports. This script automates the process of embedding necessary visualization runtimes (such as Recharts) into the output file using standard compression and encoding techniques to ensure portability and offline functionality.
  • Data Sanitization and Safety: During the report generation process, the skill applies character escaping to data payloads (via the safe_json_script_text function). This practice helps ensure that analytical data does not interfere with the HTML structure or execution environment of the generated reports.
  • Controlled Resource Access: The artifact building process is restricted to local assets within the skill's directory structure. It reads pre-defined script fragments and styles from the assets and src folders, ensuring that all bundled code originates from the developer-controlled environment rather than external sources.
  • Platform-Aware Delivery: The instructions include specific logic to select the most appropriate delivery mode (MCP app or HTML) based on the current execution environment, maximizing compatibility while maintaining consistent reporting standards.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 01:16 PM
Security Audit — agent-trust-hub — build-report