figure-spec

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local commands using the Bash tool to perform its primary functions.
  • Evidence: Uses python3 tools/figure_renderer.py for rendering, validation, and schema inspection.
  • Evidence: Uses rsvg-convert to transform SVG files into PDF format for document inclusion.
  • [SAFE]: The skill implements security best practices for its operational environment.
  • The documentation explicitly states that the tool runs fully locally with no network access or external API keys required.
  • The workflow emphasizes schema validation before execution to ensure data integrity.
  • Data processing involves structured JSON, which is less susceptible to prompt injection compared to unstructured text processing.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 02:00 PM