NYC

Streaming Mindmap Rendering

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOWEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [Unverifiable Dependencies] (LOW): The skill requires the installation of the 'mind-elixir' package via npm. This is a standard library from a public registry and is considered low risk when sourced through a package manager.\n- [Indirect Prompt Injection] (LOW): The code is designed to ingest and parse streaming data from an external URL to render a UI component. This creates a surface for indirect prompt injection; however, because the library's role is limited to data visualization (SVG/DOM rendering) without additional side-effects or decision-making capabilities, the severity is minimal.\n- [Data Exposure & Exfiltration] (SAFE): No sensitive file access, hardcoded credentials, or unauthorized network operations were detected. The use of 'fetch' is consistent with the skill's stated purpose of streaming data.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 10:02 AM