unovis-ts-skilld
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns where untrusted data processed by the agent is interpolated into HTML strings for rendering tooltips and chart labels, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Data arrays are ingested via the
setDatamethod on containers or passed directly to container constructors (found inSKILL.mdandreferences/api-surface.md). - Boundary markers: The skill does not recommend or implement boundary markers or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill utilizes components like
Tooltip,Crosshair, andGraphwhich support custom HTML rendering and event listeners (found inreferences/components.md). - Sanitization: The provided examples show direct interpolation of data properties into HTML templates (e.g.,
template: d => '<div>${d.x}: ${d.y}</div>') without explicit sanitization or escaping instructions.
Audit Metadata