custom-visualization-builder
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to use npx for executing the @splunk/create package, which is an official tool from the vendor (Splunk) for scaffolding projects.
- [COMMAND_EXECUTION]: Provides standard instructions for building, packaging, and installing Splunk app visualizations using yarn and the Splunk CLI within a local Docker environment.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies potential attack surfaces for untrusted data from Splunk searches and user-provided metadata. It includes clear mitigation instructions, such as using textContent instead of innerHTML and implementing strict validation for filesystem-related slugs to prevent path traversal.
Audit Metadata