archify

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: A thorough security audit found no malicious patterns, prompt injection attempts, or hidden code in the skill's instructions and implementation files.
  • [EXTERNAL_DOWNLOADS]: The generated HTML template includes references to Google Fonts (fonts.googleapis.com and fonts.gstatic.com). These downloads originate from a well-known, trusted service and are used exclusively for ensuring consistent typography in the diagrams.
  • [COMMAND_EXECUTION]: The skill provides Node.js scripts for processing JSON data and rendering SVG-based diagrams. This execution is performed locally and is the primary intended functionality of the skill.
  • [PROMPT_INJECTION]: The skill does not contain instructions designed to bypass agent constraints or safety protocols. It includes a dedicated sanitization function (esc) that escapes HTML entities in user-provided labels, protecting the resulting diagram files from cross-site scripting (XSS) risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 04:50 PM
Security Audit — agent-trust-hub — archify