external-diagram-mermaid-generate
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/query-org-metadata.pyutility executes the Salesforce CLI (sf) to fetch record counts and sharing model configuration for organizational grounding. Thescripts/mermaid_preview.pyscript also uses subprocess calls to launch a detached background daemon of itself. - [EXTERNAL_DOWNLOADS]: The local preview server serves an HTML template that fetches the official Mermaid.js rendering library from the well-known JSDelivr CDN (
cdn.jsdelivr.net). - [DYNAMIC_EXECUTION]: The Mermaid preview server initializes the client-side renderer with the
securityLevel: 'loose'setting. This enables advanced Mermaid features like clickable nodes and callbacks within the diagrams during local browser previews. - [SAFE]: The skill is authored by a trusted entity and all operations involving command execution or external resource fetching are standard for the intended developer-focused functionality of generating and previewing technical documentation.
Audit Metadata