mermaid-diagrams
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Mermaid CLI tool from the well-known
@mermaid-jsorganization on NPM. It also references a community-maintained Docker image (minlag/mermaid-cli) for containerized rendering. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to executemmdc(Mermaid CLI) for converting diagram definitions into image formats. It includes guidance on configuring Puppeteer for restricted environments. - [PROMPT_INJECTION]: The skill processes text-based diagram definitions, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Processes diagram definitions from
.mmdfiles or standard input. - Boundary markers: Not explicitly defined; input is passed directly to the rendering tool.
- Capability inventory: Utilizes the
Bashtool to run the rendering engine andWriteto save resulting files. - Sanitization: Relies on the default sanitization provided by the Mermaid engine.
Audit Metadata