d2-diagrams
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Installation instructions include a command to pipe a remote script from
https://d2lang.com/install.shdirectly to a shell. This resource belongs to the official D2 diagramming project. - [EXTERNAL_DOWNLOADS]: Utilizing the tool to generate PNG outputs triggers a one-time download of a bundled Chromium browser (~140MB) from the official D2 distribution sources.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executed2CLI commands for rendering, watching, and styling diagram files. - [PROMPT_INJECTION]: The skill processes untrusted data from
.d2files, creating a surface for indirect prompt injection. - Ingestion points: The skill reads
.d2files using theReadtool. - Boundary markers: There are no specific instructions or delimiters used to isolate diagram syntax from potential instructions.
- Capability inventory: The skill has access to the
Bashtool for running D2 and theWritetool for file creation. - Sanitization: No evidence of sanitization or validation of the input D2 syntax.
Audit Metadata