mermaid-styling
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill primarily offers styling recipes, CSS configurations, and JavaScript integration patterns for Mermaid diagrams. No malicious commands or exfiltration patterns were detected.
- [SAFE]: Documentation regarding the
securityLevel: 'loose'setting in Mermaid correctly identifies it as a potential risk and explicitly advises its use only for trusted content to prevent XSS. - [SAFE]: The instructions recommend using
textContentinstead ofinnerHTMLwhen manipulating diagram source, demonstrating a security-conscious approach to DOM manipulation. - [SAFE]: Dynamic module loading for layout engines uses controlled, local paths relative to the application origin.
- [SAFE]: References to external repositories and services involve well-known technology providers such as Google (fonts), GitHub, and common package registries.
Audit Metadata