d2
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides the user with an installation command
curl -fsSL https://d2lang.com/install.sh | sh -s --to set up the D2 CLI. This targets the official domain for the D2 diagramming tool (d2lang.com). - [REMOTE_CODE_EXECUTION]: The skill documents the use of a shell-piped installation script (
curl | sh) from the official D2 website. This is a common pattern for CLI tool installation and is directed at the user as an optional setup step, not executed silently by the agent.
Audit Metadata