d3-viz
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's templates for interactive charts ingest untrusted data and render it directly into the DOM using D3's
.html()method within tooltip implementations. This creates a vulnerability surface where malicious instructions or scripts embedded in data fields could be executed in the user's browser context. - Ingestion points: Data is ingested via the
dataparameter in thedrawVisualizationfunction inSKILL.mdand as a prop in theInteractiveChartcomponent inassets/interactive-template.jsx. - Boundary markers: Absent. There are no instructions or code patterns provided to delimit or ignore potentially malicious content within the data objects.
- Capability inventory: The skill utilizes D3.js to perform direct DOM manipulation, specifically injecting HTML strings into tooltip elements.
- Sanitization: Absent. Data fields such as
d.labelandd.valueare interpolated directly into template literals passed to.html()without escaping or validation.
Audit Metadata