infographic-generator
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Local file operations in
scripts/generate.pyare performed using sanitized filenames. The script filters user-supplied topic names through anisalnum()check, which prevents directory traversal attacks. - [DATA_EXFILTRATION]: The skill's ingestion of user data (JSON/CSV) is standard for visualization tasks. No patterns of data exfiltration or unauthorized access to sensitive files were found.
- [REMOTE_CODE_EXECUTION]: The skill uses Python and Mermaid.js for its core functionality. It does not download external scripts or execute untrusted code through dangerous system sinks.
Audit Metadata