cocoindex-diagrams

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's instructions and scripts are consistent with its stated purpose of assisting in documentation diagram creation. No prompt injections, obfuscation, or data exfiltration attempts were found.
  • [COMMAND_EXECUTION]: The provided scripts/preview.sh script utilizes common system tools like rsync, python3 (for a local HTTP server), curl, magick, and Google Chrome in headless mode. These operations are conducted within the local environment and the temporary /tmp/dg-preview directory to allow users to verify diagram rendering.
  • [EXTERNAL_DOWNLOADS]: The preview script runs npm run build, which is a standard command for managing dependencies and building JavaScript-based projects. This involves interacting with legitimate package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 03:11 AM
Security Audit — agent-trust-hub — cocoindex-diagrams