dashboards-and-real-time-visualization
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill is composed entirely of Markdown documentation and YAML configuration files. There are no scripts, binaries, or executable components included in the package.
- [SAFE]: All external references point to reputable technology documentation (MDN, W3C), well-known academic sources (MIT Press, Tableau Research), or established visualization platforms (Datawrapper, deck.gl). These references are used for educational purposes and do not trigger remote code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for building dashboards that ingest streaming data from sources like WebSockets or APIs. This identifies a potential attack surface for the applications built using these guidelines, rather than a vulnerability in the skill itself.
- Ingestion points: Real-time WebSocket feeds and streaming data pipelines (defined in
SKILL.mdandreferences/streaming-data-pipelines.md). - Boundary markers: The skill recommends using "stable, typed view-state contracts" and "validation" (described in
references/foundations/implementation-design-and-tradeoffs.md). - Capability inventory: Provides guidance for building interactive browser-based UIs using Canvas, WebGL, and standard DOM elements.
- Sanitization: Advices on the use of schema validation and privacy exclusions for persisted state.
Audit Metadata