baoyu-diagram
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches font resources from Google's official font service (
fonts.googleapis.com) for styling diagrams. - [COMMAND_EXECUTION]: Executes a local TypeScript script (
scripts/main.ts) using the Bun runtime to convert generated SVG files into PNG images. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes user-supplied descriptions, system architectures, or code logic to visualize them as diagrams.
- Boundary markers: None explicitly used to delimit user input from the diagram generation instructions.
- Capability inventory: The skill performs file system writes (SVG and PNG files) and executes a local conversion script.
- Sanitization: The skill transforms input into SVG data but does not treat user-provided data as executable instructions.
Audit Metadata