mermaid-diagrams
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The core functionality focuses on diagram rendering using standard tools and practices. No indicators of data exposure, prompt injection, or persistence were identified.
- [COMMAND_EXECUTION]: Employs shell scripting to extract Mermaid blocks and run the renderer. The scripts utilize controlled temporary file paths and do not incorporate unvalidated user input into shell commands.
- [EXTERNAL_DOWNLOADS]: Mentions the official
@mermaid-js/mermaid-clipackage and a Docker repository maintained by the author for environment configuration.
Audit Metadata