chart-visualization
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's logic is consistent with its stated purpose of visualizing data. No signs of prompt injection, persistence mechanisms, or credential harvesting were found.- [COMMAND_EXECUTION]: The skill utilizes a local Node.js script (
scripts/generate.js) to handle data processing and API communication. The script safely parses user input as JSON and does not employ any dangerous execution functions like eval or unsanitized shell commands.- [EXTERNAL_DOWNLOADS]: The script makes network requests tohttps://antv-studio.alipay.com/api/gpt-vis. This domain is the official home for AntV visualization services and is directly associated with the skill author 'antvis', representing a trusted vendor resource.- [DATA_EXFILTRATION]: While the skill sends data to a remote server, this is a core requirement for rendering the charts. The data transmitted is limited to the chart specifications provided by the user, and no attempts to access sensitive files or environment secrets were observed.
Audit Metadata