html-architecture-diagrams
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on generating static system architecture diagrams using HTML and SVG. The generated artifacts are self-contained and do not rely on external scripts or untrusted third-party libraries.
- [SAFE]: It enforces security-conscious coding practices by requiring the use of
textContentandcreateElementfor building the DOM, while explicitly forbidding the use ofinnerHTMLfor variable data to mitigate Cross-Site Scripting (XSS) risks. - [SAFE]: The communication mechanisms, such as
submitToClaudeand the clipboard helper, are standard platform-provided tools intended for agent-to-artifact interactivity. These tools use a local handshake and do not involve unauthorized data exfiltration or credential access. - [SAFE]: The skill restricts external dependencies to well-known, trusted services like Google Fonts and internal platform assets.
Audit Metadata