diagram-generator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill generates an HTML preview file that fetches the Mermaid.js library from
cdn.jsdelivr.net, which is a well-known and standard service for serving open-source libraries. This behavior is consistent with the skill's primary purpose and follows standard web development practices. - [COMMAND_EXECUTION]: The skill includes instructions to write an HTML file to the local directory (
diagram.html). This is a standard file operation required for the stated purpose of providing a local preview of the generated diagram. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text (tickets, specs, descriptions) to generate diagrams. While this is an ingestion point for untrusted data, the skill acts as a transformer to structured Mermaid syntax and does not possess capabilities that would typically be targets of injection attacks, such as executing system commands or accessing sensitive credentials based on that input.
Audit Metadata