chart-editing
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local project tool located at
.venv/bin/etlrto push graph configurations. This command is a legitimate part of the developer workflow for the OWID environment and is used to synchronize chart configurations with a staging server. - [EXTERNAL_DOWNLOADS]: The skill fetches configuration schemas from
files.ourworldindata.organd visual previews (PNG files) from the vendor's internal staging server (staging-site-{branch}). These network requests are directed to the vendor's own infrastructure for validation and verification purposes. - [DATA_EXFILTRATION]: The skill accesses project-specific configuration files such as
.chart.yml,chart-schema.json, and DAG definitions. These read operations are necessary for the skill's functionality and are restricted to the local directory structure of the OWID repository.
Audit Metadata