visual-docs

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a local bash script, validate-diagrams.sh, designed to extract and validate Mermaid diagram code blocks from Markdown files. This script automates the compilation check to ensure visual documentation is syntactically correct.
  • [EXTERNAL_DOWNLOADS]: The included validation utility uses npx to run the @mermaid-js/mermaid-cli package. This may trigger a download of the package from the official npm registry, which is a standard and expected behavior for Node.js-based developer tools.
  • [EXTERNAL_DOWNLOADS]: For environments without local rendering tools, the validation script can communicate with kroki.io, an established and well-known diagram rendering service. The skill documentation explicitly mentions this behavior and provides instructions for self-hosting the service via the KROKI_URL variable to avoid external data transmission.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 10:55 PM