plotly
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill demonstrates how to fetch sample datasets (CSV files) from Plotly's official repository on GitHub (e.g.,
raw.githubusercontent.com/plotly/datasets/) usingpandas.read_csv(). These are standard public datasets used for educational purposes. - [INDIRECT_PROMPT_INJECTION]: The skill describes methods for ingesting external data from URLs and local files for visualization. While this creates a potential surface for indirect prompt injection if the ingested data contains malicious instructions, the skill illustrates standard library usage for data science workflows.
- Ingestion points: Data loaded via
pd.read_csv()from external sources andpx.dataloaders. - Boundary markers: None explicitly defined in snippets; relies on standard library data parsers.
- Capability inventory: Network read (dataset fetching) and local file write (
fig.write_html). - Sanitization: Relies on Plotly's internal data handling and rendering engine.
Audit Metadata