diagram-generation
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the html2canvas library from CDNJS (a well-known service). It includes a valid Subresource Integrity (SRI) hash and crossorigin attribute, ensuring the external script has not been tampered with.
- [DATA_EXFILTRATION]: The instructions explicitly guide against embedding verbatim diff content or internal comments in the diagrams, which mitigates the risk of exposing sensitive code or information.
- [REMOTE_CODE_EXECUTION]: The HTML template includes a client-side JavaScript function for browser-based operations (copying to clipboard). This code does not involve server-side execution of untrusted input and is used for standard UI functionality.
Audit Metadata