convert-mermaid

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in convert.py to execute npx @mermaid-js/mermaid-cli. This is the intended primary purpose of the skill to perform diagram conversion.
  • The script dynamically creates a puppeteer-config.json file with --no-sandbox to ensure the headless browser runs in restricted environments.
  • Input and output paths are passed as command-line arguments, but they are handled within the script's logic for local file conversion.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 05:06 PM