Streaming Mindmap Rendering
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [Unverifiable Dependencies] (LOW): The skill requires the installation of the 'mind-elixir' package via npm. This is a standard library from a public registry and is considered low risk when sourced through a package manager.\n- [Indirect Prompt Injection] (LOW): The code is designed to ingest and parse streaming data from an external URL to render a UI component. This creates a surface for indirect prompt injection; however, because the library's role is limited to data visualization (SVG/DOM rendering) without additional side-effects or decision-making capabilities, the severity is minimal.\n- [Data Exposure & Exfiltration] (SAFE): No sensitive file access, hardcoded credentials, or unauthorized network operations were detected. The use of 'fetch' is consistent with the skill's stated purpose of streaming data.
Audit Metadata