mermaid-validate

mermaid-validate is a skill for Claude Code from fprochazka/claude-code-plugins. It costs 72 tokens per session (1,350 once invoked), scanned A, original, MIT.

A validator for one Mermaid diagram file that renders it as light and dark images and reports whether the syntax and visual result are correct and clear. It does not edit the source file.

In plain words
What is it for?
Use it to check a .mmd file before placing its contents in a plan, merge request, or ticket.
Why use it?
It catches rendering failures and readability problems, including issues that appear only against a dark background. The diagram author remains responsible for making fixes.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions subagents.

Part of the diagrams plugin — 2 skills shipped together

Good fit Use it to check a .mmd file before placing its contents in a plan, merge request, or ticket.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/fprochazka/claude-code-plugins/mermaid-validate
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add fprochazka/claude-code-plugins --skill mermaid-validate
Clone the repo
git clone --depth 1 https://github.com/fprochazka/claude-code-plugins

Made for: Claude Code.

Or install diagrams, the plugin that ships this one along with the rest of its 2 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mermaid-validate

README.md
[![agentmods](https://agentmods.dev/badge/skills/fprochazka/claude-code-plugins/mermaid-validate/github.svg)](https://agentmods.dev/skills/fprochazka/claude-code-plugins/mermaid-validate)
Your own site
<a href="https://agentmods.dev/skills/fprochazka/claude-code-plugins/mermaid-validate"><img src="https://agentmods.dev/badge/skills/fprochazka/claude-code-plugins/mermaid-validate/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mermaid-validate

Your own site · 80×15
<a href="https://agentmods.dev/skills/fprochazka/claude-code-plugins/mermaid-validate"><img src="https://agentmods.dev/badge/skills/fprochazka/claude-code-plugins/mermaid-validate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 72 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,350 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00072 $0.01350
Opus 5.5 $0.00029 $0.00540
Sonnet 5.5 $0.00014 $0.00270
Haiku 4.5 $0.00007 $0.00135

Measured 1mo ago against content hash be98b691a4c9, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mermaid-validate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/diagrams/skills/mermaid-validate/SKILL.md · 65 lines

How it starts

The opening of the file, as written. The whole thing — 65 lines — stays where its author put it; the contents beside it link to each section on GitHub.

mermaid-validate

You are the validator subagent. Your prompt names one .mmd file. Render it, look at the result, report. Never edit the .mmd file — the agent that spawned you owns it and decides what to change.

Render

rm -f <slug>-light.png <slug>-dark.png
mmdc -q -i <slug>.mmd -o <slug>-light.png -s 2 -b '#ffffff'
mmdc -q -i <slug>.mmd -o <slug>-dark.png  -s 2 -b '#1f1f1f'

The first command does both jobs at once: it fails on a syntax error, which is the lint, and it produces the picture, which is the visual check. The second renders the same source against a dark page, because the reader chooses the background and the author does not. Read both PNGs.

  • Do not pass -w. On mermaid-cli 11.17.0 an explicit -w makes -s a no-op: -w 1200 -s 1 and -w 1200 -s 3 both produce the same 1184 px wide PNG, while -s 2 alone produces 1568 px and -s 3 produces 2352 px from the same source.
  • -s is the only size control you need. With the default 800 px viewport the output is always 784 px times the scale, whatever the diagram: -s 2 gives 1568 px wide, -s 3 gives 2352 px. Start at -s 2; re-render at -s 3 when the labels are too small for you to read them.
  • -w only ever shrinks a diagram, never enlarges it. It sets the page viewport, and the SVG stops at its natural width — a sequence diagram whose natural width is 910 px renders at 910 px under both -w 1600 and -w 2400. A diagram wider than the viewport is scaled down to fit, which is what makes small text small.
  • -b sets the background the diagram is composited onto, nothing else — the same source, twice. A host renders mermaid on a transparent canvas, so whatever the diagram does not paint itself shows the reader's page through it. #1f1f1f approximates a dark-mode page.
  • command -v mmdc comes first. If mmdc is not on PATH, report that and stop. Do not install anything and do not reach for npx — the author handles the install.
  • A browser-launch failure is not a diagram problem. Failed to launch the browser process with No usable sandbox means Chromium cannot start under this kernel's user-namespace restrictions. Write { "args": ["--no-sandbox", "--disable-dev-shm-usage"] } to a pptr.json next to the diagram, retry once with -p pptr.json, and say in your report that you needed it.

Read the full file on GitHub · 65 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 65 lines · 72 tokens per session scan A be98b691a4c9

Subscribe to this mod's changes

mermaid-validate is a skill published in the GitHub repository fprochazka/claude-code-plugins (15 stars, last pushed 7d ago), licensed MIT. It adds 72 tokens to every session and 1,350 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.

Related

Other skills, from other repositories

webgl-holographic-foil

A self-contained WebGL2 hero: thin-film interference over a crushed-foil surface whose palette shifts with the viewing angle; move the cursor to tilt the film.

nexu-io/open-design · 41 tokens

html-ppt-hermes-cyber-terminal

OpenDesign + BYOK: choosing and wiring your own model, hands-on — cost, quality, and the routing decision. Built as a decision-grade AI literacy deck for engineers, IT, applied-AI teams.

nexu-io/open-design · 53 tokens

html-ppt-taste-brutalist

16:9 HTML deck in tactical-telemetry / CRT-terminal taste. Deactivated-CRT charcoal slides, white-phosphor monospace, hazard-red accent, scanline overlay, ASCII syntax, density over decoration. Distilled from Leonxlnx/taste-skill brutalist-skill (Tactical Telemetry mode).

nexu-io/open-design · 78 tokens

visual-ralph

Visual Ralph orchestration for frontend UI from generated references, static references, or live URL targets, using $ultragoal with built-in visual verdict and pixel-diff evidence until the implementation matches and leaves a reproducible design system.

Yeachan-Heo/oh-my-codex · 52 tokens

glance-canonical-layouts

Use this skill to create home screen widgets using Jetpack Glance Canonical Layouts from the Android Platform Samples project, or when asked to implement standard widget layout patterns (including Check List, Image Grid, Snap Scrolling, and Standard Toolbar).

android/skills · 56 tokens

accessibility

Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, design intent verification, and the Accessibility Planner workflow.

microsoft/hve-core · 47 tokens