diagram-codebase
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Subprocess calls are managed by a protocol runtime that enforces input validation and uses non-shell execution (
shell=False) for internal scripts, preventing command injection. - [DATA_EXFILTRATION]: File operations are confined to the repository root and a designated run directory using safe path resolution, ensuring no unauthorized access or exfiltration of sensitive data occurs.
- [PROMPT_INJECTION]: The skill proactively validates generated HTML for template integrity and dangerous JavaScript syntax, protecting against indirect prompt injection risks from untrusted diagram data.
Audit Metadata