mermaid-cli-9ee024 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mermaid-cli-9ee024 (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 2 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
# via the project npm script (-- passes args to mmdc)
npm run diagram -- -i input.mmd -o output.svg
# or directly via npx (uses local devDependency)
npx mmdc -i input.mmd -o output.svg# SVG (default)
mmdc -i diagram.mmd -o diagram.svg
# PNG
mmdc -i diagram.mmd -o diagram.png
# PDF
mmdc -i diagram.mmd -o diagram.pdfecho "graph LR; A-->B" | mmdc -i - -o out.svg| Flag | Long form | Description | |||
|---|---|---|---|---|---|
-i | --input | Input .mmd file, or - for stdin | |||
-o | --output | Output file path (.svg, .png, .pdf) | |||
-t | --theme | Theme: default \ | dark \ | forest \ | neutral |
-b | --backgroundColor | Background colour (white, transparent, #ffffff) | |||
-w | --width | Canvas width in pixels (PNG only) | |||
-H | --height | Canvas height in pixels (PNG only) | |||
-s | --scale | Scale factor for PNG (default: 1) | |||
-f | --configFile | Path to Mermaid config JSON | |||
-C | --cssFile | Path to custom CSS file |
# Dark-themed PNG at 1200 px wide
mmdc -i architecture.mmd -o architecture.png -t dark -w 1200
# Transparent-background SVG
mmdc -i flow.mmd -o flow.svg -b transparent
# Neutral theme with custom config
mmdc -i sequence.mmd -o sequence.svg -t neutral -f mermaid.config.json@mermaid-js/mermaid-cli is a devDependency of this project. After npm install, invoke the binary via npx:
npx --no-install mmdc --versionIf working outside this project and the command is not yet available locally:
npm install --save-dev @mermaid-js/mermaid-cli@latest~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.