Streaming Mindmap Rendering
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Downloads (SAFE): The skill references and suggests installing the
mind-elixirpackage, which is a legitimate and widely used frontend library for rendering mindmaps. - Command Execution (SAFE): The inclusion of an
npm installcommand is a standard part of development tutorials for JavaScript projects and poses no threat. - Data Exfiltration (SAFE): While the code uses
fetchto retrieve a stream, it is clearly intended to fetch the mindmap data for display and does not attempt to send sensitive information to an external server. - Indirect Prompt Injection (SAFE): Although the skill processes external data from a URL stream, the resulting output is limited to a visual mindmap rendering. The skill does not possess sensitive capabilities like file system access or shell execution that could be exploited through the data stream.
Audit Metadata