figure-spec
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands using the Bash tool to perform its primary functions.
- Evidence: Uses
python3 tools/figure_renderer.pyfor rendering, validation, and schema inspection. - Evidence: Uses
rsvg-convertto transform SVG files into PDF format for document inclusion. - [SAFE]: The skill implements security best practices for its operational environment.
- The documentation explicitly states that the tool runs fully locally with no network access or external API keys required.
- The workflow emphasizes schema validation before execution to ensure data integrity.
- Data processing involves structured JSON, which is less susceptible to prompt injection compared to unstructured text processing.
Audit Metadata