echarts
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the ECharts library from JSDelivr's CDN in an example HTML file. JSDelivr is a well-known and reputable service used for serving open-source library files.\n
- Evidence: The file
examples/vanilla_line.htmlreferenceshttps://cdn.jsdelivr.net/npm/echarts@6.1.0/dist/echarts.min.jsusing a pinned version and a Subresource Integrity (SRI) hash to ensure the integrity of the remote script.\n- [SAFE]: The skill provides proactive security guidance for preventing Cross-Site Scripting (XSS) within chart components.\n - Evidence: The
references/audit.mdfile contains a dedicated section on HTML tooltip trust boundaries. It provides a testing methodology using a neutral fixture string to verify that untrusted data is correctly escaped and not executed as HTML by the rendering engine.
Audit Metadata