visual-docs
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a local bash script,
validate-diagrams.sh, designed to extract and validate Mermaid diagram code blocks from Markdown files. This script automates the compilation check to ensure visual documentation is syntactically correct. - [EXTERNAL_DOWNLOADS]: The included validation utility uses
npxto run the@mermaid-js/mermaid-clipackage. This may trigger a download of the package from the official npm registry, which is a standard and expected behavior for Node.js-based developer tools. - [EXTERNAL_DOWNLOADS]: For environments without local rendering tools, the validation script can communicate with
kroki.io, an established and well-known diagram rendering service. The skill documentation explicitly mentions this behavior and provides instructions for self-hosting the service via theKROKI_URLvariable to avoid external data transmission.
Audit Metadata