diagram-generator
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/render_diagram.pyscript executes external rendering binaries such asmmdc,dot, andplantuml. These executions are performed using Python'ssubprocess.runwith argument lists, which is a secure method that prevents shell injection by avoiding shell-level interpretation of parameters. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Mermaid CLI utility via the official NPM registry (
npm install -g @mermaid-js/mermaid-cli). This reference targets a well-known service and a reputable open-source tool required for the skill's primary functionality. - [SAFE]: No evidence of prompt injection, data exfiltration, or malicious obfuscation was found. The skill maintains a clear and consistent purpose, with all scripts and instructions aligning with its stated goal of generating visual diagrams.
Audit Metadata