mermaid-skill
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill makes network requests using
curlto an external domain (https://kroki.io) to validate and render Mermaid diagrams when the local compiler option is not utilized. - [EXTERNAL_DOWNLOADS]: The documentation instructs the environment to install external packages, specifically
@mermaid-js/mermaid-clivia npm and the Chrome headless shell via Puppeteer. - [COMMAND_EXECUTION]: The execution workflow triggers local shell commands including
mmdcfor rendering,sipsorfilefor verifying image outputs, and a local Python scriptscripts/mermaid_live_link.pyto generate sharing links.
Audit Metadata