财务图表制作展示 Financial Charts

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:36 PM UTC
• Version:
  1.0.1

Overview

This skill generates local financial chart HTML files as described, with the main caveat that the generated chart loads ECharts from a public CDN when opened.

Install only if you are comfortable generating local HTML files from your data. Opening those files will load ECharts from jsDelivr, so avoid highly sensitive financial data unless you review the output, use a locally bundled ECharts copy, or open it in a restricted/offline environment.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Medium

• Confidence: 93% confidence
• Finding: The generated HTML imports ECharts from a public CDN, which causes the output file to make a network request when opened. That expands the skill's trust boundary from local file generation to remote code execution in the browser, creating supply-chain, privacy, and offline-reliability risks if the CDN is unavailable, tampered with, or blocked.

VirusTotal

63/63 vendors flagged this skill as clean.