imagine-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: Comprehensive review of the skill's instructions, templates, and scripts reveals no malicious patterns, data exfiltration vectors, or obfuscation techniques. The skill is designed as a legitimate developer utility for scientific visualization.\n- [COMMAND_EXECUTION]: The skill provides Node.js utilities (
new_project.mjsandnew_figure.mjs) to automate the creation of project structures and React components. These scripts implement regex-based validation for IDs and use basic string escaping to safely interpolate user-provided titles and labels into generated source files.\n- [EXTERNAL_DOWNLOADS]: Documentation references the use of Playwright for the rendering pipeline and MathJax (via CDN) for equation support. These are well-known and trusted technology services integrated to support the skill's primary functionality.
Audit Metadata