vtable-development-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local Python scripts (
scripts/generate_demo_html.pyandscripts/generate_diagnosis_html.py) to process user configurations and generate interactive HTML files for previewing table components in a browser. - [DYNAMIC_EXECUTION]: The generated HTML templates utilize the Monaco editor and browser-side JavaScript evaluation (
new Function()) to provide live previews of VTable configurations, which is the primary intended functionality of the skill. - [INDIRECT_PROMPT_INJECTION]: The diagnostic workflow processes user-supplied code snippets by interpolating them into local HTML templates to help identify and fix configuration errors, representing a managed data ingestion surface for developer support.
Audit Metadata