peach-gen-diagram

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to invoke mermaid-cli via npx for rendering diagram files (PNG/SVG). This execution is scoped to the skill's primary function of visualization.
  • [EXTERNAL_DOWNLOADS]: Fetches the latest version of the official @mermaid-js/mermaid-cli package from the well-known npm registry using npx. This is a standard approach for utilizing established diagramming tools.
  • [PROMPT_INJECTION]: The skill features an attack surface for indirect prompt injection as it processes natural language descriptions and external code files to generate diagrams. However, the logic is focused on content transformation into visual formats and does not exhibit patterns of safety filter bypass or command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 02:26 PM