Is matthewyin/diagram-generator safe?
Yes. matthewyin/diagram-generator is safe to install. Oathe's behavioral security audit gave the diagram-generator skill by matthewyin a trust score of 97/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/matthewyin/diagram-generator
Is matthewyin/diagram-generator safe to install?
This is a legitimate diagram generation skill that integrates with an MCP server to create diagrams in multiple formats (draw.io, mermaid, excalidraw). No security concerns detected - the skill contains only documentation and configuration files with no executable code, performs no suspicious network activity beyond normal git clone operations, and accesses no sensitive files.
What security issues were found in matthewyin/diagram-generator?
Category Scores
Findings (2)
INFO External MCP server dependency -5 ▶
Skill requires external MCP server (mcp-diagram-generator) to be installed and configured separately. This adds complexity but poses no direct security risk as no executable code is included in the skill itself.
INFO Contact information disclosure -2 ▶
Skill documentation includes author contact email address. This is standard practice for support but represents minor information disclosure.
Should I install matthewyin/diagram-generator?
Oathe's verdict for matthewyin/diagram-generator is SAFE with a trust score of 97/100. Recommendation: Install.