beautiful-mermaid

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOW
Full Analysis
  • [SAFE] (SAFE): Analysis of the skill body and code snippets revealed no malicious patterns. The instructions are consistent with the stated purpose of rendering Mermaid diagrams.- [EXTERNAL_DOWNLOADS] (LOW): The skill references the 'beautiful-mermaid' and 'shiki' packages from npm and unpkg.com. These are standard dependencies for the library's functionality and do not exhibit suspicious behavior in this context.- [Indirect Prompt Injection] (INFO): The skill processes untrusted Mermaid syntax to generate SVG or ASCII output. This is a standard ingestion point for a rendering tool and does not present an immediate security risk unless the output is rendered in an environment vulnerable to XSS.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 12:36 PM