dynami-carchify
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: A detailed audit of all Node.js scripts, assets, and configuration files found no evidence of malicious behavior, prompt injection, or unauthorized data access.
- [EXTERNAL_DOWNLOADS]: The skill fetches fonts from Google Fonts and the gif.js library from the well-known jsDelivr CDN; both are recognized as safe, well-known services.
- [COMMAND_EXECUTION]: Local Node.js execution is restricted to the rendering logic provided within the skill's own scripts, used as intended for diagram generation.
- [DATA_EXFILTRATION]: No network exfiltration or unauthorized file reads were detected; data processing is localized to the agent's environment.
- [DYNAMIC_EXECUTION]: The templating engine avoids unsafe execution patterns like eval() and properly escapes user-provided labels and descriptions before embedding them in the output HTML.
Audit Metadata