infographic-creator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to include the AntV Infographic library from
unpkg.com, a well-known service for serving NPM packages. The package@antv/infographicis a resource associated with the skill author. - [DYNAMIC_EXECUTION]: The skill generates an HTML file containing JavaScript to render the infographic using the AntV library. This script generation is the intended primary functionality of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text to populate the infographic's data fields, which creates an attack surface where malicious input could attempt to influence the agent's rendering or file generation process.
- Ingestion points: User-provided text content intended for the infographic (specified in Step 1 of the generation process).
- Boundary markers: None identified; the skill does not specify delimiters or warnings to ignore instructions within the user data.
- Capability inventory: The skill uses a Write tool to create HTML files on the local filesystem.
- Sanitization: None identified; the skill does not provide instructions for escaping or validating the user-provided text before interpolation.
Audit Metadata