skills/fioenix/mindmap-skills/markmap/Gen Agent Trust Hub

markmap

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches necessary rendering libraries from jsDelivr, a well-known CDN, including d3 and markmap-related components.
  • [COMMAND_EXECUTION]: The scripts/render.sh script executes npx to download and run the markmap-cli utility for creating offline HTML mindmaps.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes external user content to build mindmap hierarchies. * Ingestion points: User-provided notes, architecture documents, or brainstorming text. * Boundary markers: The skill includes explicit instructions in SKILL.md to treat input documents strictly as data and never as instructions to execute commands or reveal secrets. * Capability inventory: The skill can perform file writes for .md and .html deliverables and execute the render.sh shell script. * Sanitization: The assets/template.html file includes a runtime sanitizer that uses DOMParser to strip dangerous tags like script, iframe, and object from the content before rendering.
  • [DYNAMIC_EXECUTION]: The skill generates interactive HTML artifacts that utilize JavaScript to transform Markdown JSON into a visual SVG mindmap at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 09:14 AM