legal-diagram
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements a secure two-pass extraction architecture. Pass 1 is a deterministic Python engine that harvests legal entities without LLM involvement. Pass 2 uses the LLM for filling specific gaps via a validated JSON Patch mechanism.
- [EXTERNAL_DOWNLOADS]: Fetches the Mermaid JS engine from the well-known jsDelivr CDN (
cdn.jsdelivr.net) usingurllib.request.urlopeninscripts/fetch_mermaid.py. This is used to enable offline HTML diagram exports and is a standard dependency fetch. - [COMMAND_EXECUTION]: Executes the Mermaid CLI (
mmdc) viasubprocess.runinscripts/verify_render.pyfor diagram verification. This is a local diagnostic tool and does not process untrusted shell arguments. - [SAFE]: The skill processes user documents but includes explicit instructions and architectural guards, such as the
patch_gate.pyvalidator, to mitigate risks associated with untrusted data processing.
Audit Metadata