plantuml
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/render.pyexecutes theplantumlorjavabinaries to perform rendering. - Evidence: Found in
scripts/render.pywithin therun()function usingsubprocess.run(cmd). - Context: The script correctly passes arguments as a list rather than a shell string, mitigating the risk of command injection from user-supplied file paths or theme names.
- [SAFE]: The skill instructions and reference materials contain only benign technical documentation.
- Evidence: Reviewed
SKILL.mdand all files in thereferences/directory. - Context: External links point exclusively to official PlantUML documentation and setup guides. No obfuscation, data exfiltration, or persistence mechanisms were detected.
Audit Metadata