Skills
skills/cklxx/elephant.ai/diagram-to-image/Gen Agent Trust Hub

diagram-to-image

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the @mermaid-js/mermaid-cli package, which is a well-known and trusted tool from the official Mermaid organization for rendering diagrams.
  • [COMMAND_EXECUTION]: The Python script executes the mmdc binary via subprocess.run. The command is constructed using a list of arguments rather than a single string, which is a secure implementation that mitigates shell injection risks.
  • [DATA_EXPOSURE]: The skill uses temporary files in /tmp to process the Mermaid code, ensuring that input data is cleaned up after execution via os.unlink.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 03:42 AM