mermaidjs-v11
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Mermaid.js libraries and command-line tools from well-known repositories and content delivery networks.
- Downloads the official
@mermaid-js/mermaid-cliandmermaidpackages from the NPM registry. - References the Mermaid library from the JSDelivr CDN (
cdn.jsdelivr.net) for browser-based rendering. - Pulls official Docker images from the GitHub Container Registry (
ghcr.io). - Dynamically loads icon packs from the
esm.runCDN. - [COMMAND_EXECUTION]: Provides instructions for executing diagram rendering via the Mermaid CLI (
mmdc). - Covers standard conversion commands for SVG, PNG, and PDF outputs.
- Includes Docker-based execution patterns with appropriate volume mounting and user permission handling.
- [PROMPT_INJECTION]: Addresses the attack surface for indirect prompt injection when processing untrusted diagram definitions.
- Ingestion points: Ingests and processes diagram code blocks provided by users or generated by the agent for rendering.
- Boundary markers: Explicitly recommends the
strictsecurity level in configuration to ensure HTML encoding and isolation. - Capability inventory: Documents rendering capabilities including CLI-based file generation and browser DOM injection.
- Sanitization: Utilizes the library's default integration of DOMPurify to sanitize diagram output by default.
Audit Metadata