tekton
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The rendered HTML viewer incorporates the elkjs layout engine sourced from the JSDelivr CDN (https://cdn.jsdelivr.net/npm/elkjs@0.9.3/lib/elk.bundled.js) to compute diagram layouts in the browser.
- [COMMAND_EXECUTION]: Includes a visual audit script (tests/visual-audit.sh) that locates and executes local browser binaries such as Google Chrome or Chromium for headless geometry verification and screenshot generation.
- [SAFE]: The Python engine features specialized sanitization to prevent data breakouts from architecture labels, specifically neutralizing tags to ensure security when rendering untrusted model data into the interactive HTML viewer.
Audit Metadata