plantuml
Fail
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's footprint is coherent with its stated purpose: it derives data from context, renders a PlantUML diagram, and outputs a markdown image path. It relies on locally installed tools (emacsclient and PlantUML) and uses a session-scoped color, with temporary file handling in /tmp. The data access is limited to local context and UI color data; there is minimal risk of credential exposure or remote exfiltration. Minor concerns include lack of explicit error handling for tool availability and ephemeral /tmp file cleanup, but these do not undermine the intended functionality or pose significant security risk in typical developer environments.
Confidence: 98%
Audit Metadata