infographic-generator

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Local file operations in scripts/generate.py are performed using sanitized filenames. The script filters user-supplied topic names through an isalnum() check, which prevents directory traversal attacks.
  • [DATA_EXFILTRATION]: The skill's ingestion of user data (JSON/CSV) is standard for visualization tasks. No patterns of data exfiltration or unauthorized access to sensitive files were found.
  • [REMOTE_CODE_EXECUTION]: The skill uses Python and Mermaid.js for its core functionality. It does not download external scripts or execute untrusted code through dangerous system sinks.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 01:11 AM
Security Audit — agent-trust-hub — infographic-generator