archify
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs local processing of diagram definitions without unauthorized network communication or external code execution.
- [SAFE]: All user-supplied data in the JSON input is strictly validated against schemas via pre-compiled standalone validators before any rendering occurs.
- [SAFE]: The rendering engine uses an explicit escaping utility (
esc) to sanitize user-provided labels and sublabels before interpolating them into the HTML template, preventing injection vulnerabilities in the generated output. - [SAFE]: External resource references are limited to well-known and trusted providers (Google Fonts) for typography, and these are loaded asynchronously to ensure functionality even in restricted network environments.
- [SAFE]: Command execution is restricted to internal Node.js scripts using safe parameter passing, avoiding shell injection risks.
Audit Metadata