mermaidjs-v11

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches Mermaid.js libraries and command-line tools from well-known repositories and content delivery networks.
  • Downloads the official @mermaid-js/mermaid-cli and mermaid packages from the NPM registry.
  • References the Mermaid library from the JSDelivr CDN (cdn.jsdelivr.net) for browser-based rendering.
  • Pulls official Docker images from the GitHub Container Registry (ghcr.io).
  • Dynamically loads icon packs from the esm.run CDN.
  • [COMMAND_EXECUTION]: Provides instructions for executing diagram rendering via the Mermaid CLI (mmdc).
  • Covers standard conversion commands for SVG, PNG, and PDF outputs.
  • Includes Docker-based execution patterns with appropriate volume mounting and user permission handling.
  • [PROMPT_INJECTION]: Addresses the attack surface for indirect prompt injection when processing untrusted diagram definitions.
  • Ingestion points: Ingests and processes diagram code blocks provided by users or generated by the agent for rendering.
  • Boundary markers: Explicitly recommends the strict security level in configuration to ensure HTML encoding and isolation.
  • Capability inventory: Documents rendering capabilities including CLI-based file generation and browser DOM injection.
  • Sanitization: Utilizes the library's default integration of DOMPurify to sanitize diagram output by default.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 06:52 PM
Security Audit — agent-trust-hub — mermaidjs-v11