architecture-diagram-creator
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to read local project documentation (like README files) and generate a structured HTML overview with SVG diagrams. This is a standard documentation workflow.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive file paths (e.g., .ssh, .aws) are accessed. The skill does not perform any network operations to send data externally.
- [COMMAND_EXECUTION]: The skill does not utilize any shell commands or subprocess calls. Its operations are limited to reading project metadata and writing a local HTML file.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts or packages.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted project data (README, code structure) to populate the architecture diagram, the risk is limited to content being rendered in the generated HTML report. There are no exploitable capabilities like network access or privileged execution that could be leveraged by such an injection.
Audit Metadata