chart-splat
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security vulnerabilities were detected. The skill's operations, including network requests to the vendor's API (api.chartsplat.com) and local file writing, are legitimate and necessary for its documented functionality.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
chartsplat-clipackage from the official npm registry vianpx, which is the intended delivery mechanism for this vendor's tool. - [COMMAND_EXECUTION]: The skill uses standard Node.js and npx commands to execute its chart generation logic.
Audit Metadata