Is mermaid safe to install?

SaferSkills independently audited mermaid (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/mermaid/SKILL.md · 1 file

skills/mermaid/SKILL.md2.0 KB · Markdown

name: mermaid

description: |-

Generate Mermaid diagrams for chatbot flows that render in Markdown, including choosing diagram types, producing valid Mermaid code blocks, and validating or rendering diagrams locally via the bundled scripts. Use when a user asks for chatbot flowcharts/sequence/state diagrams, wants Mermaid syntax, or needs to verify/render Mermaid without a web service.

Mermaid Diagrams for Chatbots

Use this skill to create Mermaid diagrams that render well in Markdown chat interfaces, validate their syntax locally, and render images without calling a web service.

Invocation Notice

Inform the user when this skill is being invoked by name: mermaid.

Workflow

Identify the diagram type (flowchart, sequenceDiagram, stateDiagram-v2) based on the request.
Draft Mermaid code in a fenced Markdown block using mermaid.
Follow formatting conventions in references/chatbot-mermaid-guidelines.md.
Validate the diagram using scripts/validate_mermaid.py.
If the user wants an image file, render with scripts/render_mermaid.py.

Scripts

scripts/validate_mermaid.py
Validate Mermaid code by invoking the local Mermaid CLI (mmdc).
Use when you need to check whether Mermaid parses without errors.
scripts/render_mermaid.py
Render Mermaid to SVG/PNG/PDF using the local Mermaid CLI (mmdc).
Prefer SVG for Markdown renderers when image embedding is required.

Notes

These scripts expect mmdc to be available on PATH (Mermaid CLI).

If missing, instruct the user to install it locally; do not use the Mermaid web service.

Dependencies are managed via inline uv script metadata in each Python script.

Use --install-chromium to bootstrap the Chromium binary via pyppeteer when needed.

Keep diagrams compact and readable in chat: avoid overly wide graphs, use short labels, and group related states.
If the user asks for raw Markdown, return only the fenced mermaid block unless they ask for extra explanation.

mermaid— agent skill

Is mermaid safe to install?

Mermaid Diagrams for Chatbots

Invocation Notice

Workflow

Scripts

Notes

Audit the pieces. Scan the whole. Decide.