blueprint-figure
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a structured workflow for generating SVG diagrams using local templates and scripts. No malicious instructions, exfiltration patterns, or unauthorized access attempts were identified.
- [DYNAMIC_EXECUTION]: The skill includes a local Node.js template script (
templates/figure.mjs) used to programmatically generate SVG files. This script is self-contained, performs basic HTML entity escaping to prevent injection within the SVG content, and only interacts with the local file system to write the generated output to a user-specified path. - [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process external system data (such as log captures or source code names) to populate diagram labels, the provided template uses a sanitization function (
esc) to escape special characters. This mitigates the risk of malicious data influencing the structure of the generated SVG file.
Audit Metadata