Agent skill · Audited from source

pretty-mermaid

skill · imxv/pretty-mermaid-skillsMIT licenceAudited 20 Oct 2026 · source 13cf4c3aadcb

★ 1,535pushed 58 days ago
✓SAFEGrade B · 89/100 · 20 Oct 2026 · 13cf4c3
1,535repo stars · whole imxv/pretty-mermaid-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 13cf4c3aadcb and observed shell access and no hard-coded secrets. What it does: Generate and render Mermaid diagrams for architecture docs, READMEs, PRs, terminals, chats, and CI as themed SVG, PNG, or ASCII/Unicode art. Use this skill whenever the user provides Mermaid code or .mmd files; asks for…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “pretty-mermaid (imxv/pretty-mermaid-skills)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/imxv/pretty-mermaid

Trust audit

Audit 0.4.1 · source read 20 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium1 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellDeclared2 observations
  • DependenciesNot pinnedSome versions float
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS1
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (1)

LOWSupply chainsupply.unpinned · package.json
F-08 Supply chainCWE-829 · CWE-1357Layer L1
@resvg/resvg-js, beautiful-mermaid
Why
2 dependency range(s) float
Fix
pin exact versions or ship a lockfile

Audit 0.4.1 · source sha 13cf4c3aadcb · 20 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherimxv GitHub userOwner of the repository this skill is read from
  • Source folderimxv/pretty-mermaid-skillsThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict13cf4c3aadcbA new audit runs when the source changes
  • Repository statusNot archivedLast push 58 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Generate and render Mermaid diagrams for architecture docs, READMEs, PRs, terminals, chats, and CI as themed SVG, PNG, or ASCII/Unicode art. Use this skill whenever the user provides Mermaid code or .mmd files; asks for…

---
name: pretty-mermaid
description: |
  Generate and render Mermaid diagrams for architecture docs, READMEs, PRs,
  terminals, chats, and CI as themed SVG, PNG, or ASCII/Unicode art. Use this skill whenever
  the user provides Mermaid code or .mmd files; asks for a flowchart,
  sequence/state/class diagram, ERD, XY chart, or architecture/workflow/data-model
  visualization; or wants to beautify, theme, batch-convert, or make a diagram
  terminal-friendly. Runs locally without a browser or DOM, with 15 built-in
  themes and custom colors.
---

# Pretty Mermaid

Create or render Mermaid diagrams with the bundled Node.js CLI. Use SVG for scalable documentation, PNG for sharing or raster-only consumers, and ASCII or Unicode for terminals and plain text.

## Working directory

Treat the directory containing this file as `<skill-root>`. Run bundled scripts from that directory, or invoke them with absolute paths. Keep user source and rendered output in the user's requested location; do not copy the renderer into their project.

## Workflow

1. Determine whether the user supplied Mermaid source or needs a diagram authored from prose.
2. Choose the diagram type and output format from the tables below.
3. Read only the relevant reference file when syntax, theme selection, or API behavior needs more detail.
4. Save new source as a `.mmd` file, preserving user terminology and relationships.
5. Render with a named theme or explicit colors.
6. Inspect the result. Fix syntax, clipping, crowded layout, or unclear labels and render again.
7. Return the source and output paths, plus the selected format and theme.

Do not overwrite an existing source or output file unless the user asked for replacement.

## Choose a diagram type

| Need | Diagram type | Starter |
| --- | --- | --- |
| Process, decision tree, architecture | Flowchart | `flowchart LR` |
| API calls, messages, interactions | Sequence | `sequenceDiagram` |
| Lifecycle or finite-state machine | State | `stateDiagram-v2` |
| Classes, modules, relationships | Class | `classDiagram` |
| Database entities and cardinality | ER | `erDiagram` |
| Bars, lines, trends, comparisons | XY chart | `xychart-beta` |

Read `references/DIAGRAM_TYPES.md` when authoring non-trivial Mermaid syntax.

## Choose an output

| Output | Best for | Notes |
| --- | --- | --- |
| SVG | READMEs, docs, slides, websites | Scalable, themed, supports transparency |
| PNG | Chats, previews, raster-only tools | Set `--format png`; no external converter required |
| Unicode | Modern terminals and readable text previews | Default ASCII renderer output |
| Plain ASCII | Logs and restricted terminals | Add `--use-ascii` |
| ANSI-colored text | Interactive terminals | Set `--color-mode` |

## Core commands

Run these from `<skill-root>`.

### List themes

```bash
node scripts/themes.mjs
```

### Render SVG

```bash
node scripts/render.mjs \
  --input diagram.mmd \
  --output diagram.svg \
  --theme tokyo-night
```

### Render terminal text

```bash
node scripts/render.mjs \
  --input diagram.mmd \
  --output diagram.txt \
  --format ascii \
  --color-mode none
```

Add `--use-ascii` when Unicode box-drawing characters are not acceptable.

### Render PNG

```bash
node scripts/render.mjs \
  --input diagram.mmd \
  --output diagram.png \
  --format png \
  --width 1200 \
  --theme tokyo-night
```

### Batch render a directory

```bash
node scripts/batch.mjs \
  --input-dir ./diagrams \
  --output-dir ./rendered \
  --format svg \
  --theme github-dark \
  --workers 4
```

Use batch rendering for three or more diagrams or when consistent options must be applied to a directory.

## Theme selection

- General dark documentation: `tokyo-night`
- GitHub dark or light surfaces: `github-dark`, `github-light`
- Print and presentations: `zinc-light`
- High-contrast color: `dracula`
- Cool, restrained palette: `nord`, `nord-light`

Read `references/THEMES.md` or open `docs/THEME_GALLERY.md` when visual theme choice matters. A named theme can be refined with explicit color flags.

## Useful options

### Shared styling

| Option | Purpose |
| --- | --- |
| `--theme <name>` | Apply one of the 15 built-in themes |
| `--bg`, `--fg` | Set required base colors |
| `--line`, `--accent`, `--muted` | Refine connectors, highlights, and secondary text |
| `--surface`, `--border` | Refine node fill and stroke |
| `--font <name>` | Set the SVG font family |

### SVG

| Option | Purpose |
| --- | --- |
| `--transparent` | Remove the SVG background |
| `--padding <n>` | Set canvas padding |
| `--node-spacing <n>` | Set horizontal node spacing |
| `--layer-spacing <n>` | Set vertical layer spacing |
| `--component-spacing <n>` | Separate disconnected components |
| `--interactive` | Enable XY chart hover tooltips |

### PNG

| Option | Purpose |
| --- | --- |
| `--width <n>` | Set output width from 100 to 10000 pixels while preserving aspect ratio |
| `--transparent` | Preserve a transparent background |

### Terminal output

| Option | Purpose |
| --- | --- |
| `--use-ascii` | Replace Unicode box drawing with plain ASCII |
| `--padding-x`, `--padding-y` | Tune diagram spacing |
| `--box-border-padding` | Tune padding inside node boxes |
| `--color-mode <mode>` | `none`, `auto`, `ansi16`, `ansi256`, `truecolor`, or `html` |

Run `node scripts/render.mjs --help` or `node scripts/batch.mjs --help` for the authoritative CLI list.

## Authoring guidance

- Prefer short, concrete labels; preserve domain-specific terms from the user.
- Use explicit edge labels when a branch or message is ambiguous.
- Keep large diagrams readable by splitting unrelated concerns instead of shrinking text.
- Use `LR` for wide flows and `TB` for narrow documents.
- Avoid communicating meaning through color alone.
- Use a light theme for print and confirm contrast against the final background.
- For unfamiliar syntax, start from `assets/example_diagrams/` and consult the diagram reference.

## Validation

After rendering:

1. Confirm the 

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 13cf4c3

Download folder ↗
git clone https://github.com/imxv/Pretty-mermaid-skills.git
npx skills add imxv/pretty-mermaid-skills@pretty-mermaid -g -y

Commands as the repository documents them: shown, never run by us. Our verdict covers commit 13cf4c3aadcb only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
Gemini CLIMentioned in its text, not testedSkills for Gemini CLI · About Gemini CLI
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 13cf4c3aadcb

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/imxv/pretty-mermaid/badge.svg)](https://modelsatlas.com/skills/imxv/pretty-mermaid/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Spec Driven Development✓SAFE

addyosmani/agent-skills

Creates specs before coding. Use when starting a new project, feature, or significant change and no specification exists yet. Use when drafting a PRD or requirements document with objectives and scope, or when…

★ 100kGrade B
Test Driven Development!CAUTION

addyosmani/agent-skills

Drives development with tests using the red-green-refactor loop. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that code works, when a bug report arrives, or when…

★ 100kGrade B
Using Agent Skills✓SAFE

addyosmani/agent-skills

Discovers and invokes agent skills. Use when starting a session, or when you need to decide which skill or workflow applies to the piece of work at hand. This is the meta-skill that governs how all other skills are…

★ 100kGrade B
Api And Interface Design✓SAFE

addyosmani/agent-skills

Guides stable API and interface design. Use when designing APIs, module boundaries, or any public interface. Use when creating REST or GraphQL endpoints, defining type contracts between modules, or establishing…

★ 100kGrade B
Ci Cd And Automation✓SAFE

addyosmani/agent-skills

Automates CI/CD pipeline setup. Use when setting up or modifying build and deployment pipelines. Use when you need to automate quality gates, configure test runners in CI, or establish deployment strategies.

★ 100kGrade B
Code Review And Quality✓SAFE

addyosmani/agent-skills

Conducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human. Use when you need to assess code quality across multiple dimensions before it…

★ 100kGrade B

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/imxv/pretty-mermaid/badge.svg)](https://modelsatlas.com/skills/imxv/pretty-mermaid/)

Questions about pretty-mermaid

What does the pretty-mermaid skill do?
AI Agent Skill to generate and render beautiful Mermaid diagrams as SVG or terminal ASCII — 15 themes, 6 diagram types, batch CLI, no browser.
Is pretty-mermaid safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can pretty-mermaid access on my machine?
The audit observed that it runs shell commands. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does pretty-mermaid work with?
Its documentation mentions claude-code, codex, cursor and gemini-cli. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (13cf4c3aadcb), read on 2026-10-20. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.