mermaid-diagrams-expert
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the Mermaid Live Editor (mermaid.live) and standard Node.js packages like @mermaid-js/mermaid-cli and @iconify-json icon packs. These are well-known resources within the documentation and software development community.
- [COMMAND_EXECUTION]: The skill documents the use of the Mermaid CLI (mmdc) and npx for local diagram validation and rendering. These instructions are provided as part of a development workflow and include explicit warnings that environment changes or package installations require user approval.
- [INDIRECT_PROMPT_INJECTION]: As the skill generates diagrams based on user-provided descriptions of software logic and architecture, it possesses an ingestion surface for potentially malicious data. The skill includes a dedicated security reference (references/security.md) that provides guidance on anonymizing sensitive data and using sanitizers to mitigate these risks.
Audit Metadata