c4-container-diagram
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/d2-workbench.pyutility invokes the locald2binary and thescripts/verify-svg.pyscript to perform diagram rendering and geometric validation. - [EXTERNAL_DOWNLOADS]: The reference materials provide a shell command to download documentation updates directly from the official d2lang GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill parses and synchronizes D2 code blocks within Markdown files, implementing several security best practices for data processing.
- Ingestion points: Diagram source code contained within Markdown triple-backtick fences in files like
SKILL.md. - Boundary markers: Strict adherence to Markdown code block delimiters.
- Capability inventory: Ability to read and write files in the local workspace and execute the
d2layout engine via subprocesses. - Sanitization: The implementation uses list-based subprocess calls in
scripts/d2-workbench.pyto ensure user-provided content cannot trigger arbitrary shell commands.
Audit Metadata