diagram-generator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited diagram-generator (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This repository contains reusable Codex skills, MCP servers, and plugin packages.
diagram-generator is split into three publishable surfaces:
skills/diagram-generator/: the agent-facing skill and reference playbooks.mcp-diagram-generator/: the TypeScript MCP server that generates Draw.io, Mermaid, and Excalidraw files.plugins/diagram-generator/: the Codex plugin wrapper that installs the skill and configures the MCP server.The plugin MCP configuration uses:
{
"mcpServers": {
"mcp-diagram-generator": {
"command": "npx",
"args": ["-y", "mcp-diagram-generator"]
}
}
}This intentionally resolves the latest npm package at runtime.
subtitle-converter is a standalone skill for subtitle format conversion.
CustomSkills/
├── mcp-diagram-generator/
│ ├── scripts/
│ ├── src/
│ ├── package.json
│ └── tsconfig.json
├── plugins/
│ └── diagram-generator/
│ ├── .codex-plugin/
│ ├── .mcp.json
│ └── skills/
└── skills/
├── diagram-generator/
│ ├── SKILL.md
│ ├── package.json
│ └── references/
└── subtitle-converter/
├── SKILL.md
├── scripts/
└── references/Run subtitle converter syntax checks:
python3 -m py_compile skills/subtitle-converter/scripts/convert.pyRun MCP server checks from mcp-diagram-generator/:
npm install
npm run build
npm run test:diagramsGenerated artifacts, local runtime state, dependency folders, archives, and environment files are intentionally ignored.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.