explainer-visuals
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references established, well-known libraries like D3.js and GSAP from official and widely used content delivery networks (CDNs) including d3js.org and cdnjs.cloudflare.com. The instructions explicitly recommend including integrity hashes for these external scripts to ensure security and integrity.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it ingests user-provided content (essays, blog posts) to generate visualizations. However, the risk is minimized because the agent's output is limited to self-contained code for the user's web content, and the skill contains instructions to follow strict design and accessibility schemas.
- [COMMAND_EXECUTION]: The skill does not perform any shell command execution or system-level operations. The JavaScript provided in the reference patterns is restricted to client-side browser logic for animations and data visualization.
Audit Metadata