build-report
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- Dynamic HTML Artifact Generation: The skill utilizes a specialized Python script (
scripts/embed_html_report_runtime.py) to assemble self-contained HTML reports. This script automates the process of embedding necessary visualization runtimes (such as Recharts) into the output file using standard compression and encoding techniques to ensure portability and offline functionality. - Data Sanitization and Safety: During the report generation process, the skill applies character escaping to data payloads (via the
safe_json_script_textfunction). This practice helps ensure that analytical data does not interfere with the HTML structure or execution environment of the generated reports. - Controlled Resource Access: The artifact building process is restricted to local assets within the skill's directory structure. It reads pre-defined script fragments and styles from the
assetsandsrcfolders, ensuring that all bundled code originates from the developer-controlled environment rather than external sources. - Platform-Aware Delivery: The instructions include specific logic to select the most appropriate delivery mode (MCP app or HTML) based on the current execution environment, maximizing compatibility while maintaining consistent reporting standards.
Audit Metadata