mermaid-graph-renderer

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. Most of the skill is a benign documentation guide, and the Mermaid CLI/CDN references align with official sources. However, it also recommends sending diagram content to Kroki's third-party hosted gateway and includes a mismatched third-party Rust install path that is not official to Mermaid, creating medium supply-chain and data-flow concerns disproportionate to a simple renderer guide.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
Sep 18, 2026, 12:14 AM
Package URL
pkg:socket/skills-sh/curiositech%2Fsome_claude_skills%2Fmermaid-graph-renderer%2F@f459c2d08d7d941f7a239e2a3a52e2173f7eb5ebcc8a727ef1f4c5f5ad752155
Security Audit — socket — mermaid-graph-renderer