mermaidjs-v11
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Mermaid.js components, including the '@mermaid-js/mermaid-cli' and 'mermaid' packages from the npm registry. It also provides links to well-known CDNs such as jsDelivr and esm.run, and the official Docker image on GitHub Container Registry (ghcr.io).
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for rendering user-supplied diagram code. It includes specific documentation on security configurations, advocating for the use of 'securityLevel: strict' and highlighting the default usage of DOMPurify to protect against cross-site scripting (XSS) at runtime.
Audit Metadata