plantuml

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides examples for C4 architecture diagrams that utilize the !include directive to fetch standard definitions from the official PlantUML Standard Library hosted on GitHub (plantuml-stdlib/C4-PlantUML).\n- [COMMAND_EXECUTION]: Instructions in the documentation guide the user to install additional design skills using the npx skills command, which targets resources from the same vendor ecosystem (full-stack-skills).\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and interpret user-provided system descriptions and source code (ingestion points) to generate diagram output. The skill includes the capability to save generated diagrams to the local documentation tree (capability inventory). The instructions mitigate risks by mandating structural validation, checking for the absence of secrets in the output, and explicitly warning against remote dependencies without user consent (sanitization). No specific boundary markers are defined for the prompt interpolation, but the specialized syntax of PlantUML acts as a natural constraint.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 04:02 PM