mermaid-tools

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
5
Flagged
5
Chunks
5
Flagged Files (5)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: mermaid-tools description: Extracts Mermaid diagrams from markdown files and generates high-quality PNG images using bundled scripts.

references/setup_and_troubleshooting.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/setup_and_troubleshooting.md Description: # Mermaid Diagram Generation - Setup and Troubleshooting ## Table of Contents - [Prerequisites](#prerequisites) - [Script Locations](#script-locations) - [Features](#features) - [Environment Variables](#environment-variables) - [Troubleshooting](#troubleshooting) - [Validation](#validation) ## Prerequisites ### 1.

scripts/extract-and-generate.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/extract-and-generate.sh Description: #!/bin/bash # Enhanced Mermaid diagram extraction and PNG generation script # Extracts diagrams from markdown and numbers them sequentially # # Usage: ./extract-and-generate.sh <markdown_file> [output_directory] # Example: ./extract-and-generate.sh "~/workspace/document.md" "~/workspace/diagrams" set -e SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" CONFIG_FILE="$SCRIPT_DIR/puppeteer-config.json" EXTRACTOR_SCRIPT="$SCRIPT_DIR/extract

scripts/extract_diagrams.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/extract_diagrams.py Description: #!/usr/bin/env python3 """ Extract Mermaid diagrams from markdown file and create numbered .mmd files """ import re import sys from pathlib import Path def extract_mermaid_diagrams(markdown_file, output_dir): """Extract Mermaid diagrams from markdown file and create numbered .mmd files""" try: with open(markdown_file, 'r', encoding='utf-8') as f: content = f.read() except Exception as e: print(f"ERROR: Cannot read markdown file: {e}") return [] # Fi

scripts/puppeteer-config.jsonHIGH
78.3%

Malicious tool definition detected

Tool: scripts/puppeteer-config.json Description: { "args": [ "--no-sandbox", "--disable-setuid-sandbox", "--disable-dev-shm-usage", "--disable-gpu",

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
5
Files Flagged
5
Chunks Analyzed
5
Analyzed
Feb 21, 2026, 09:19 AM
Security Audit — runlayer — mermaid-tools