mols-mermaid-diagram
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The verification guidelines (references/mermaid-verification.md) include standard command-line examples for using the Mermaid CLI (
mmdc) to export diagrams to various formats such as SVG, PNG, and PDF. - [EXTERNAL_DOWNLOADS]: The skill documents the use of
kroki.io, a well-known service for rendering diagrams, as a fallback method for generating images from Mermaid source code. The documentation explicitly notes that this should only be used when network access is permitted and sensitive content is not involved. - [REMOTE_CODE_EXECUTION]: One remote pattern is identified for diagram rendering purposes: Mermaid source code is sent to
kroki.iovia a POST request to retrieve a rendered SVG. This is standard functionality for diagram-as-code tools and does not constitute an arbitrary code execution risk.
Audit Metadata