patent-analysis-viz
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local script for all processing tasks. It correctly identifies the script path and enforces its use, reducing the risk of arbitrary code generation by the agent. No network operations or sensitive file accesses were detected.\n- [REMOTE_CODE_EXECUTION]: Static analysis identified the use of
importlib.import_moduleinscripts/analyze_patents.py. This is used to load standard libraries likematplotlib,plotly, andseabornusing static strings, which is a safe practice and does not allow for arbitrary code execution.\n- [PROMPT_INJECTION]: The skill processes untrusted patent data from Excel files. The script implements proper sanitization usinghtml.escapefor the HTML dashboard output, addressing potential indirect injection vectors in the generated content.
Audit Metadata