arch-visualizer
Automatically generates architecture documentation and diagrams from codebase-graph data, supporting various formats like Mermaid and PlantUML.
Install this skill
Security score
The arch-visualizer skill was audited on Feb 9, 2026 and we found 21 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 346 | lines.push(` ${sanitized}["${mod.name}"]`); |
Template literal with variable interpolation in command context
| 358 | lines.push(` ${sourceId} ==> ${targetId}`); // 강한 의존성 |
Template literal with variable interpolation in command context
| 360 | lines.push(` ${sourceId} --> ${targetId}`); |
Template literal with variable interpolation in command context
| 368 | lines.push(` %% Circular: ${cycleNodes.join(' -> ')}`); |
Template literal with variable interpolation in command context
| 386 | lines.push(` class ${cls.name} {`); |
Template literal with variable interpolation in command context
| 392 | lines.push(` ${visibility}${prop.name}: ${this.simplifyType(prop.type)}`); |
Template literal with variable interpolation in command context
| 399 | lines.push(` +${method.name}()`); |
Template literal with variable interpolation in command context
| 409 | lines.push(` ${cls.extends} <|-- ${cls.name}`); |
Template literal with variable interpolation in command context
| 412 | lines.push(` ${impl} <|.. ${cls.name}`); |
Template literal with variable interpolation in command context
| 429 | if (visited.has(`${caller}->${nodeId}`)) return; |
Template literal with variable interpolation in command context
| 430 | visited.add(`${caller}->${nodeId}`); |
Template literal with variable interpolation in command context
| 441 | lines.push(` ${callerParticipant}->>+${participant}: ${node.name}()`); |
Template literal with variable interpolation in command context
| 442 | lines.push(` ${participant}-->>-${callerParticipant}: result`); |
Template literal with variable interpolation in command context
| 444 | lines.push(` ${callerParticipant}->>+${participant}: ${node.name}()`); |
Template literal with variable interpolation in command context
| 459 | ` participant ${p}` |
Template literal with variable interpolation in command context
| 474 | lines.push(` subgraph ${layer.name}["${layer.displayName}"]`); |
Template literal with variable interpolation in command context
| 477 | lines.push(` ${id}["${node.name}"]`); |
Template literal with variable interpolation in command context
| 484 | lines.push(` ${layers[i].name} --> ${layers[i + 1].name}`); |
Template literal with variable interpolation in command context
| 490 | lines.push(` %% VIOLATION: ${v.from} --> ${v.to}`); |
Template literal with variable interpolation in command context
| 491 | lines.push(` ${v.from} -.->|violation| ${v.to}`); |
Template literal with variable interpolation in command context
| 585 | const key = `${sourceModule}->${targetModule}`; |