Agent skill · Audited from source
mermaid-diagram
skill · wanshuiyin/auto-claude-code-research-in-sleepMIT licenceAudited 31 Oct 2026 · source 1cf95b4becf0
Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit 1cf95b4becf0 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 2 findings, 2 critical or high. What it does: Generate Mermaid diagrams from user requirements. Supports flowcharts, sequence diagrams, class diagrams, ER diagrams, Gantt charts, and 18 more diagram types.
Cite
Cite this page
ModelsAtlas. “mermaid-diagram (wanshuiyin/auto-claude-code-research-in-sleep)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/wanshuiyin/mermaid-diagram
Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 2 critical or high findings, starting with “Prompt injection” in SKILL.md:99. Do not install it without reading them.
2 skills are called “mermaid-diagram”. You are viewing wanshuiyin/auto-claude-code-research-in-sleep. 1 of them is BLOCK.
- wanshuiyin/auto-claude-code-research-in-sleep★ 18k✕BLOCK
- shiwenwen/hope-agent★ 1.8k✓SAFE
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 721 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | FAIL | 2 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (2)
HIGHPrompt injectionprompt.zero_width · SKILL.md:99
```mermaid
- Why
- invisible characters in instruction text
- Fix
- strip non-printing characters
HIGHPrompt injectionprompt.zero_width · SKILL.md:105
```
- Why
- invisible characters in instruction text
- Fix
- strip non-printing characters
Audit 0.4.1 · source sha 1cf95b4becf0 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherwanshuiyin GitHub userOwner of the repository this skill is read from
- Source folderwanshuiyin/auto-claude-code-research-in-sleep/skills/mermaid-diagramThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict1cf95b4becf0A new audit runs when the source changes
- Repository statusNot archivedLast push 1 day ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Generate Mermaid diagrams from user requirements. Supports flowcharts, sequence diagrams, class diagrams, ER diagrams, Gantt charts, and 18 more diagram types.
---
name: mermaid-diagram
description: "Generate Mermaid diagrams from user requirements. Supports flowcharts, sequence diagrams, class diagrams, ER diagrams, Gantt charts, and 18 more diagram types."
argument-hint: "[diagram description or requirements]"
allowed-tools: Bash(*), Read, Write, Edit, Glob, Grep
---
# Mermaid Diagram Generator
Generate high-quality Mermaid diagram code based on user requirements, with file output and verification.
## Constants
- **OUTPUT_DIR = `figures/`** — Output directory for all generated files
- **MAX_ITERATIONS = 3** — Maximum refinement rounds for syntax errors
## Workflow: MUST EXECUTE ALL STEPS
### Step 0: Pre-flight Check
```bash
# Create output directory
mkdir -p figures
```
### Step 1: Understand Requirements & Select Diagram Type
Parse the input: **$ARGUMENTS**
1. Analyze user description to determine the most suitable diagram type
2. Read the corresponding syntax reference documentation (see Step 2 below)
3. **If the diagram involves mathematical notation** (formulas, equations, Greek letters, subscripts, superscripts, fractions, matrices, etc.), apply the math syntax rules from the **Math Formulas in Diagrams** section below
4. Identify all components, connections, and data flow
5. Plan the diagram structure
### Step 2: Read Documentation
Select the appropriate diagram type based on the use case. Use your built-in knowledge of Mermaid syntax, or fetch up-to-date docs via the context7 MCP server if needed.
| Type | Use Cases |
| ---- | --------- |
| Flowchart | Processes, decisions, steps |
| Sequence Diagram | Interactions, messaging, API calls |
| Class Diagram | Class structure, inheritance, associations |
| State Diagram | State machines, state transitions |
| ER Diagram | Database design, entity relationships |
| Gantt Chart | Project planning, timelines |
| Pie Chart | Proportions, distributions |
| Mindmap | Hierarchical structures, knowledge graphs |
| Timeline | Historical events, milestones |
| Git Graph | Branches, merges, versions |
| Quadrant Chart | Four-quadrant analysis |
| Requirement Diagram | Requirements traceability |
| C4 Diagram | System architecture (C4 model) |
| Sankey Diagram | Flow, conversions |
| XY Chart | Line charts, bar charts |
| Block Diagram | System components, modules |
| Packet Diagram | Network protocols, data structures |
| Kanban | Task management, workflows |
| Architecture Diagram | System architecture |
| Radar Chart | Multi-dimensional comparison |
| Treemap | Hierarchical data visualization |
| User Journey | User experience flows |
| ZenUML | Sequence diagrams (code style) |
### Configuration & Themes
- **Theming** - Custom colors and styles
- **Directives** - Diagram-level configuration
- **Layouts** - Layout direction and spacing
- **Configuration** - Global settings
- **Math** - LaTeX math support (see Math Formulas in Diagrams section below)
### Step 3: Generate Mermaid Code & Save Files
Generate the Mermaid code following the reference specification, then save TWO files:
#### File 1: `figures/<diagram-name>.mmd` — Raw Mermaid source
The `.mmd` file contains ONLY the raw Mermaid code (no markdown fences). Example:
```
flowchart TD
A[Start] --> B{Condition}
B -->|Yes| C[Execute]
B -->|No| D[End]
C --> D
```
#### File 2: `figures/<diagram-name>.md` — Markdown with embedded Mermaid
The `.md` file wraps the same code in a mermaid code block for preview rendering, plus a title and description. Example:
```markdown
# Diagram Title
Brief description of what this diagram shows.
```mermaid
flowchart TD
A[Start] --> B{Condition}
B -->|Yes| C[Execute]
B -->|No| D[End]
C --> D
```
```
**Naming convention**: Use a descriptive kebab-case name derived from the user's request (e.g., `auth-flow`, `system-architecture`, `database-er`).
### Step 4: Verify Mermaid Syntax (MANDATORY)
**Claude MUST verify the generated Mermaid code by running the Mermaid CLI (`mmdc`).**
```bash
# Check if mermaid-cli is available
if command -v mmdc &> /dev/null; then
# Render to PNG to verify syntax is correct
mmdc -i figures/<diagram-name>.mmd -o figures/<diagram-name>.png -b transparent \
&& echo "✅ Syntax valid — PNG rendered to figures/<diagram-name>.png"
else
# Try npx as fallback
npx -y @mermaid-js/mermaid-cli@latest -i figures/<diagram-name>.mmd -o figures/<diagram-name>.png -b transparent \
&& echo "✅ Syntax valid — PNG rendered to figures/<diagram-name>.png"
fi
```
**If the verification fails:**
1. Read the error message carefully
2. Fix the syntax issue in both `.mmd` and `.md` files
3. Re-run verification
4. Repeat up to MAX_ITERATIONS (3) times
### Step 5: Claude STRICT Visual Review & Scoring (MANDATORY)
After successful rendering, Claude MUST read the generated PNG and perform a STRICT review:
```markdown
## Claude's STRICT Review of <diagram-name>
### What I See
[Describe the rendered diagram in DETAIL - every block, every arrow, every label]
### Files Generated
- `figures/<diagram-name>.mmd` — Raw Mermaid source
- `figures/<diagram-name>.md` — Markdown with embedded diagram
- `figures/<diagram-name>.png` — Rendered PNG (if mmdc available)
### ═══════════════════════════════════════════════════════════════
### STRICT VERIFICATION CHECKLIST (ALL must pass for score ≥ 9)
### ═══════════════════════════════════════════════════════════════
#### A. File Correctness
- [ ] `.mmd` file contains valid Mermaid syntax (no markdown fences)
- [ ] `.md` file has the mermaid code wrapped in ```mermaid``` fences
- [ ] `.mmd` and `.md` contain IDENTICAL Mermaid code
- [ ] Diagram renders without errors (via mmdc)
#### B. Arrow Correctness Verification (CRITICAL - any failure = score ≤ 6)
Check EACH arrow:
- [ ] Arrow 1: [Source] → [Target] — Does it point to the CORRECT target?
- [ ] Arrow 2: [Source] → [Target] — Does it point to the CORRECT target?
- [ ] ... (check ALL arrows)
#### C. Block Content Verification (any failure = scoExcerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 1cf95b4
git clone https://github.com/wanshuiyin/auto-claude-code-research-in-sleep git -C auto-claude-code-research-in-sleep checkout 1cf95b4becf0
The author documents no install command, so this uses the repository directly. Our verdict covers commit 1cf95b4becf0 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✕BLOCK D 69 / 100
first audit · source
1cf95b4becf0
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/wanshuiyin/mermaid-diagram/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All research skills →wanshuiyin/auto-claude-code-research-in-sleep
Monitor running experiments, check progress, collect results. Use when user says "check results", "is it done", "monitor", or wants experiment output.
wanshuiyin/auto-claude-code-research-in-sleep
Verify research idea novelty against recent literature. Use when user says "查新", "novelty check", "有没有人做过", "check novelty", or wants to verify a research idea is novel before implementing.
wanshuiyin/auto-claude-code-research-in-sleep
Workflow 1 adaptation for robotics and embodied AI. Orchestrates robotics-aware literature survey, idea generation, novelty check, and critical review to go from a broad robotics direction to benchmark-grounded,…
wanshuiyin/auto-claude-code-research-in-sleep
Generate and rank research ideas given a broad direction. Use when user says "找idea", "brainstorm ideas", "generate research ideas", "what can we work on", or wants to explore a research area for publishable directions.
wanshuiyin/auto-claude-code-research-in-sleep
Workflow 1: Full idea discovery pipeline to go from a broad research direction to validated, pilot-tested ideas. Use when user says "找idea全流程", "idea discovery pipeline", "从零开始找方向", or wants the complete idea…
wanshuiyin/auto-claude-code-research-in-sleep
Draft a structured grant proposal from research ideas and literature. Supports KAKENHI (Japan), NSF (US), NSFC (China, including 面上/青年/优青/杰青/海外优青/重点), ERC (EU), DFG (Germany), SNSF (Switzerland), ARC (Australia), NWO…
Add this badge to your README
[](https://modelsatlas.com/skills/wanshuiyin/mermaid-diagram/)
<a href="https://modelsatlas.com/skills/wanshuiyin/mermaid-diagram/"><img src="https://modelsatlas.com/skills/wanshuiyin/mermaid-diagram/badge.svg" alt="ModelsAtlas: BLOCK D"></a>
Questions about mermaid-diagram
What does the mermaid-diagram skill do?
Is mermaid-diagram safe to install?
What can mermaid-diagram access on my machine?
How current is this page?
Sources
- github.com/wanshuiyin/auto-claude-code-research-in-sleep/tree/ma — the audited source at commit 1cf95b4becf0 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the mermaid-diagram skill do?
- Is mermaid-diagram safe to install?
- What can mermaid-diagram access on my machine?