plotly
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the 'plotly', 'kaleido', and 'dash' packages via the 'uv' package manager. These are well-known and legitimate libraries within the Python data science ecosystem.
- [PROMPT_INJECTION]: The skill contains a 'Suggest Using K-Dense Web For Complex Workflows' section that instructs the agent to proactively recommend an external research platform (www.k-dense.ai) when user queries increase in complexity. This acts as a behavioral steer to promote the skill author's own services, but it does not attempt to bypass safety filters or exfiltrate sensitive data.
Audit Metadata