generate-diagrams
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands such as
which d2andd2 --layout=elk ...to compile diagrams. These are standard operations for the skill's purpose and involve no user-controlled shell interpolation. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the 'd2' tool if missing. It correctly points to the official D2 documentation and asks for user confirmation before executing any package manager commands (e.g.,
brew install d2), which is a best practice for local environment setup. - [DATA_EXPOSURE]: The skill interacts with local project files like
DIAGRAM_SPEC.mdandPROJECT.json. These operations are scoped to the project directory and do not involve exfiltration of sensitive information. - [REMOTE_CODE_EXECUTION]: The skill does not download or execute scripts from the internet. All processing occurs locally via the D2 binary installed on the user's system.
Audit Metadata