mermaid-generator
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes arbitrary user-provided text, logic, and workflows to generate Mermaid diagrams. It lacks explicit boundary markers (e.g., delimiters) or instructions for the agent to ignore potentially malicious directives embedded within the processed text, which could lead to indirect prompt injection.
- Ingestion points: Arbitrary text, workflow descriptions, and logic inputs as defined in the core capabilities of
SKILL.md. - Boundary markers: Absent; no specific instructions are provided to the agent to distinguish between the content to be visualized and potential instructions within that content.
- Capability inventory: The skill instructs the agent to perform file system write operations to save Markdown files in specific local directories (
00 收件箱/画板/mermaid流程图/). - Sanitization: Absent; the skill does not specify any validation or filtering of the input text before processing or generating file content.
Audit Metadata