multi-chart-draw
Pass
Audited by Gen Agent Trust Hub on Jun 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python's
subprocess.runto execute external command-line utilities, specifically@mermaid-js/mermaid-cli(mmdc) andmarkmap-cli. These calls are essential for rendering Mermaid diagrams and Markdown-based mind maps into image or vector formats. - [EXTERNAL_DOWNLOADS]: The skill generates interactive HTML files for ECharts, GeoGebra, and DrawIO visualizations. These files reference official JavaScript libraries from well-known services and reputable CDNs, such as
cdn.jsdelivr.net,geogebra.org, anddiagrams.net(Diagrams.net), which is a standard and safe practice for web-based rendering. - [EXTERNAL_DOWNLOADS]: The skill's documentation and frontmatter clearly state the requirement for system-level dependencies to be installed via
npmto enable the full range of rendering capabilities, which is a transparent and standard approach for CLI-dependent tools.
Audit Metadata