data-viz-designer
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides examples that fetch the ECharts visualization library from the jsDelivr CDN (cdn.jsdelivr.net), which is a well-known technology service.
- [PROMPT_INJECTION]: The skill's workflow creates a surface for indirect prompt injection and cross-site scripting (XSS).
- Ingestion points: The skill accepts untrusted datasets from users in various formats including CSV, JSON, and Excel (SKILL.md).
- Boundary markers: There are no instructions for the agent to use delimiters or ignore embedded instructions within the ingested data.
- Capability inventory: The agent has the capability to generate and output executable HTML, CSS, and JavaScript code intended to run directly in a browser (SKILL.md).
- Sanitization: The instructions do not specify any sanitization, escaping, or validation of the user-provided data before it is interpolated into the generated code's data series, labels, or configuration objects.
Audit Metadata