d2-diagrams
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command that fetches and executes a shell script from the official product domain at https://d2lang.com/install.sh.
- [EXTERNAL_DOWNLOADS]: The documentation indicates that the D2 utility downloads a bundled Chromium browser (~140 MB) during its initial PNG rendering operation. It also references SVG icon assets hosted on the official vendor server at https://icons.terrastruct.com.
- [COMMAND_EXECUTION]: The skill utilizes the
d2command-line interface via Bash to perform all core functions, including rendering diagrams to various formats, managing layout engines, and applying themes.
Audit Metadata