schedule-visualizer
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a bundled shell script (scripts/verify_html.sh) to validate the generated HTML output. This script performs safety and integrity checks, such as identifying broken hex color codes and verifying that the file contains no external network resource references.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources like JIRA and GitHub to populate schedule templates. While this involves reading untrusted external data, the process is limited to generating static visualization artifacts. The ingestion surface and tool-based gathering are well-defined, and the included verification script helps ensure the structural integrity of the final artifact.
Audit Metadata