build-dashboard
Creates interactive HTML dashboards with charts and filters for effective data visualization and reporting.
Install this skill
Security score
The build-dashboard skill was audited on Jun 8, 2026 and we found 14 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 234 | changeEl.textContent = `${sign}${pctChange.toFixed(1)}% vs prior period`; |
Template literal with variable interpolation in command context
| 235 | changeEl.className = `kpi-change ${pctChange >= 0 ? 'positive' : 'negative'}`; |
Template literal with variable interpolation in command context
| 242 | if (value >= 1e6) return `$${(value / 1e6).toFixed(1)}M`; |
Template literal with variable interpolation in command context
| 243 | if (value >= 1e3) return `$${(value / 1e3).toFixed(1)}K`; |
Template literal with variable interpolation in command context
| 244 | return `$${value.toFixed(0)}`; |
Template literal with variable interpolation in command context
| 246 | return `${value.toFixed(1)}%`; |
Template literal with variable interpolation in command context
| 248 | if (value >= 1e6) return `${(value / 1e6).toFixed(1)}M`; |
Template literal with variable interpolation in command context
| 249 | if (value >= 1e3) return `${(value / 1e3).toFixed(1)}K`; |
Template literal with variable interpolation in command context
| 304 | return `${context.dataset.label}: ${formatValue(context.parsed.y, 'currency')}`; |
Template literal with variable interpolation in command context
| 416 | return `${context.label}: ${formatValue(context.parsed, 'number')} (${pct}%)`; |
Template literal with variable interpolation in command context
| 540 | html += `<th onclick="sortTable('${col.field}')" style="cursor:pointer">${col.label}${arrow}</th>`; |
Template literal with variable interpolation in command context
| 550 | html += `<td>${value}</td>`; |
External URL reference
| 140 | <script src="https://cdn.jsdelivr.net/npm/[email protected]" integrity="sha384-jb8JQMbMoBUzgWatfe6COACi2ljcDdZQ2OxczGA3bGNeWe+6DChMTBJemed7ZnvJ" crossorigin="anonymous"></script> |
External URL reference
| 141 | <script src="https://cdn.jsdelivr.net/npm/[email protected]" integrity="sha384-cVMg8E3QFwTvGCDuK+ET4PD341jF3W8nO1auiXfuZNQkzbUUiBGLsIQUE+b1mxws" crossorigin="anonymous"></script> |