peach-gen-diagram
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to invoke
mermaid-clivianpxfor rendering diagram files (PNG/SVG). This execution is scoped to the skill's primary function of visualization. - [EXTERNAL_DOWNLOADS]: Fetches the latest version of the official
@mermaid-js/mermaid-clipackage from the well-known npm registry usingnpx. This is a standard approach for utilizing established diagramming tools. - [PROMPT_INJECTION]: The skill features an attack surface for indirect prompt injection as it processes natural language descriptions and external code files to generate diagrams. However, the logic is focused on content transformation into visual formats and does not exhibit patterns of safety filter bypass or command injection.
Audit Metadata