mermaid-gen

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/validate_mermaid.py and its associated tests use subprocess.run to execute the Mermaid CLI (mmdc) or npx for diagram rendering. These calls are functional requirements of the skill and follow security best practices by passing arguments as a list rather than using shell=True.
  • [EXTERNAL_DOWNLOADS]: The validation script utilizes npx to invoke @mermaid-js/mermaid-cli. This may involve downloading the package from the official npm registry, which is a well-known and standard service for developer tooling.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 12:08 PM
Security Audit — agent-trust-hub — mermaid-gen