plantuml-ascii

Fail

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill's installation instructions include the use of sudo apt-get install, which involves executing commands with administrative privileges.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to fetch the PlantUML JAR file from GitHub, which is a well-known service for hosting software releases.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform system-level operations, including installing software via brew, apt-get, and yum, as well as executing the PlantUML tool via java or direct binary calls.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided PlantUML diagram definitions to generate ASCII art, creating a surface for potential injection through malformed data.
  • Ingestion points: Reads .puml files containing diagram definitions.
  • Boundary markers: None identified in the provided instructions.
  • Capability inventory: File reading and writing, and arbitrary command execution via Bash.
  • Sanitization: No input validation or sanitization of the PlantUML source code is specified.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 15, 2026, 06:48 AM