interactive-dashboard-builder
Creates interactive HTML dashboards using Chart.js, enabling users to build reports with filters and professional styling.
Install this skill
Security score
The interactive-dashboard-builder skill was audited on Feb 28, 2026 and we found 14 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 117 | changeEl.textContent = `${sign}${pctChange.toFixed(1)}% vs prior period`; |
Template literal with variable interpolation in command context
| 118 | changeEl.className = `kpi-change ${pctChange >= 0 ? 'positive' : 'negative'}`; |
Template literal with variable interpolation in command context
| 125 | if (value >= 1e6) return `$${(value / 1e6).toFixed(1)}M`; |
Template literal with variable interpolation in command context
| 126 | if (value >= 1e3) return `$${(value / 1e3).toFixed(1)}K`; |
Template literal with variable interpolation in command context
| 127 | return `$${value.toFixed(0)}`; |
Template literal with variable interpolation in command context
| 129 | return `${value.toFixed(1)}%`; |
Template literal with variable interpolation in command context
| 131 | if (value >= 1e6) return `${(value / 1e6).toFixed(1)}M`; |
Template literal with variable interpolation in command context
| 132 | if (value >= 1e3) return `${(value / 1e3).toFixed(1)}K`; |
Template literal with variable interpolation in command context
| 187 | return `${context.dataset.label}: ${formatValue(context.parsed.y, 'currency')}`; |
Template literal with variable interpolation in command context
| 299 | return `${context.label}: ${formatValue(context.parsed, 'number')} (${pct}%)`; |
Template literal with variable interpolation in command context
| 423 | html += `<th onclick="sortTable('${col.field}')" style="cursor:pointer">${col.label}${arrow}</th>`; |
Template literal with variable interpolation in command context
| 433 | html += `<td>${value}</td>`; |
External URL reference
| 23 | <script src="https://cdn.jsdelivr.net/npm/[email protected]" integrity="sha384-jb8JQMbMoBUzgWatfe6COACi2ljcDdZQ2OxczGA3bGNeWe+6DChMTBJemed7ZnvJ" crossorigin="anonymous"></script> |
External URL reference
| 24 | <script src="https://cdn.jsdelivr.net/npm/[email protected]" integrity="sha384-cVMg8E3QFwTvGCDuK+ET4PD341jF3W8nO1auiXfuZNQkzbUUiBGLsIQUE+b1mxws" crossorigin="anonymous"></script> |