processon-diagram-generator
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements its stated functionality without malicious behavior. It facilitates diagram generation by interacting with a specific, legitimate external service.
- [CREDENTIALS_SAFE]: The skill requires a
PROCESSON_API_KEY, which is correctly managed through environment variables. The implementation inprocesson_api_client.pyuses standard Authorization headers and includes logic to ensure that these credentials are not included in diagnostic output or logs. - [EXTERNAL_DOWNLOADS]: The
check_update.pyscript retrieves a version manifest from the developer's GitHub repository (processonai/processon-skills). This operation is limited to reading JSON data for version comparison and does not involve the execution of remote code or scripts. - [DATA_EXFILTRATION]: Network communications are restricted to the primary API endpoint (
smart.processon.com) and the official update repository on GitHub. There is no evidence of sensitive data, such as local files or credentials, being sent to unauthorized third-party servers. - [COMMAND_EXECUTION]: The skill utilizes Python scripts for its core logic and testing. These scripts perform standard file I/O operations (saving images) and network requests required for the diagram generation workflow.
Audit Metadata