chrono-flow
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a utility for generating static HTML visualizations from JSON input. It does not contain any malicious patterns such as prompt injection, data exfiltration, or persistence mechanisms.\n- [SAFE]: All user-provided data interpolated into the HTML output is processed through
html.escape(), which effectively prevents HTML injection and Cross-Site Scripting (XSS) attacks in the generated artifact.\n- [SAFE]: Theme-related configuration values (like colors and fonts) are sanitized using a regular expression to prevent CSS injection or breaking out of the style block.\n- [SAFE]: The script uses only Python standard libraries and does not perform any network operations, sensitive file system access, or external code execution. It adheres to the principle of least privilege by only reading the provided configuration and writing the requested output file.
Audit Metadata