recharts
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation, configuration steps, and code snippets for integrating the legitimate Recharts React library into a development project.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon user-supplied visualization requirements, which creates a potential surface for indirect prompt injection if processing untrusted data.
- Ingestion points: User requests for chart creation, dashboard scaffolding, and data source connection (SKILL.md).
- Boundary markers: Absent; no specific instructions are provided to the agent to distinguish between user instructions and data content.
- Capability inventory: Includes the ability to install Node.js packages (
npm install) and generate/modify project source code (SKILL.md). - Sanitization: Absent; the skill provides raw component templates and standard installation procedures.
Audit Metadata