mermaid-diagram
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is well-structured and focuses entirely on its stated purpose of creating visual diagrams. All external resources and scripts are used for legitimate rendering and validation tasks.
- [EXTERNAL_DOWNLOADS]: The skill leverages the official
@mermaid-js/mermaid-clipackage from the npm registry usingnpx --yes. This is a standard and safe practice for accessing the well-known Mermaid rendering toolset. - [COMMAND_EXECUTION]: The agent is instructed to use a local helper script (
references/render_mermaid.sh) to render diagrams. The script is written with security in mind, using double quotes for variables to prevent shell injection and performing basic input validation before executing the rendering command.
Audit Metadata