mermaid-gen
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate_mermaid.pyand its associated tests usesubprocess.runto execute the Mermaid CLI (mmdc) ornpxfor diagram rendering. These calls are functional requirements of the skill and follow security best practices by passing arguments as a list rather than usingshell=True. - [EXTERNAL_DOWNLOADS]: The validation script utilizes
npxto invoke@mermaid-js/mermaid-cli. This may involve downloading the package from the official npm registry, which is a well-known and standard service for developer tooling.
Audit Metadata