chart-image
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard Node.js libraries (
vega,vega-lite,sharp) to process data and generate image files. All operations are local to the execution environment. - [DATA_HANDLING]: Data is ingested via standard input or CLI arguments and parsed as JSON or CSV. The output is written to a file path specified by the user or agent, which is a standard and expected behavior for this type of utility.
- [COMMAND_EXECUTION]: While the skill is executed via the command line, it does not internally spawn untrusted subprocesses or execute dynamic code strings. The script parses its own arguments manually and safely.
- [DEPENDENCIES]: All identified dependencies are standard, versioned packages from the official NPM registry.
Audit Metadata