Mermaid Diagrams

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says: it helps render Mermaid diagrams using a disclosed local command-line tool.

Install this only if you are comfortable adding Mermaid CLI to your environment. Use the official npm package source, avoid unnecessary administrator privileges, and be aware that generated diagram files may remain in temporary folders unless cleaned up.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

Confidence: 89% confidence
Finding: This markdown file describes file-writing behavior as part of the skill workflow, including creating temporary `.mmd` and `.png` files and only conditionally cleaning them up. Because markdown files are in scope for missing user warnings, the description should disclose that the skill writes temporary files to disk and may leave artifacts behind.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal