architecture-diagram
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
html2canvasandjsPDFlibraries from jsDelivr, which is a well-known and trusted content delivery network. These libraries are industry-standard tools used here for client-side diagram export functionality. - [EXTERNAL_DOWNLOADS]: Loads technical typography from the well-known Google Fonts service.
- [COMMAND_EXECUTION]: Invokes a local shell script (
scripts/screenshot.sh) to perform headless browser rendering of the generated diagrams. The script searches for local Chrome or Chromium binaries and executes them with the--no-sandboxflag, which is a common operational requirement for headless browsers in many automated or containerized environments.
Audit Metadata