pm-toolkit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pm-toolkit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
将用户的自然语言描述转换为 Mermaid 语法图表，通过本地 Web 面板实时渲染预览。
scripts/serve.py，零外部依赖）scripts/panel.html，刷新/编辑/保存/导出/主题切换）| 用户意图 | Mermaid 关键字 |
|---|---|
| 业务流程、审批流 | flowchart LR/TB |
| API 调用、系统交互 | sequenceDiagram |
| 数据库设计 | erDiagram |
| 类关系、继承 | classDiagram |
| 状态转换 | stateDiagram-v2 |
| 项目计划 | gantt |
| 占比分布 | pie |
| 层级关系 | mindmap |
| 里程碑 | timeline |
| 分支管理 | gitGraph |
| 用户体验、满意度评估 | journey |
| 需求优先级、竞品定位 | quadrantChart |
| 趋势分析、数据对比 | xychart-beta |
| 用户漏斗、流量分布 | sankey-beta |
| 系统模块划分、信息架构 | block-beta |
| 系统架构概览、技术评审 | C4Context / C4Container |
生成前读取 references/mermaid-syntax.md 获取语法速查。
将代码写入 .mmd 文件：
<描述性名称>.mmd（如 user-registration-flow.mmd）.pm-toolkit/ 目录subgraph 组织层次，为连接添加标签python3 <SKILLS_DIR>/pm-toolkit/scripts/serve.py --file <文件路径.mmd>
open http://localhost:9876面板操作：
用户提出修改时，直接编辑 .mmd 文件，在面板点"刷新"查看。
| 场景 | 处理 |
|---|---|
| Mermaid 语法错误 | 面板显示错误详情 |
| CDN 加载失败 | 检查网络连接 |
| 端口占用 | --port 9877 指定其他端口 |
Agent 生成完整 HTML 页面，通过设备框架预览。工具只是容器。
#### 1. 生成 HTML 页面
生成前读取 references/prototype-style.md 获取设计规范。
将页面写入 HTML 文件：
.pm-toolkit/prototype/<描述性名称>.html（如 login.html、user-profile.html）<meta name="viewport" content="width=375"> (mobile) 或 width=768 (pad) 或不设 (pc)#### 2. 启动预览
python3 <SKILLS_DIR>/pm-toolkit/scripts/proto_serve.py --dir <项目路径/.pm-toolkit/prototype/>
open http://localhost:9877面板操作：
#### 3. 迭代
用户提出修改时，Agent 直接编辑 HTML 文件，面板点 Refresh 查看。
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.