mermaid-graph-renderer
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. Most of the skill is a benign documentation guide, and the Mermaid CLI/CDN references align with official sources. However, it also recommends sending diagram content to Kroki's third-party hosted gateway and includes a mismatched third-party Rust install path that is not official to Mermaid, creating medium supply-chain and data-flow concerns disproportionate to a simple renderer guide.
Confidence: 89%Severity: 56%
Audit Metadata