Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ihatesea69/kiro-kit --skill mermaid-diagramsgit clone --depth 1 https://github.com/ihatesea69/kiro-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ihatesea69/kiro-kit/mermaid-diagrams)<a href="https://agentmods.dev/skills/ihatesea69/kiro-kit/mermaid-diagrams"><img src="https://agentmods.dev/badge/skills/ihatesea69/kiro-kit/mermaid-diagrams/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ihatesea69/kiro-kit/mermaid-diagrams"><img src="https://agentmods.dev/badge/skills/ihatesea69/kiro-kit/mermaid-diagrams.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 23 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00059 | $0.01498 |
| Opus 5 | $0.00030 | $0.00749 |
| Sonnet 5 | $0.00012 | $0.00300 |
| Haiku 4.5 | $0.00006 | $0.00150 |
Grade A, and why
mermaid-diagrams scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 170 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Mermaid Diagrams
Text-first diagramming for architecture documents, specs, and READMEs. Mermaid renders natively in GitHub, GitLab, and most Markdown viewers; sources live in the repo and diff cleanly.
Mermaid vs draw.io (see also the diagramming-conventions steering file):
use Mermaid for logical views (C4, sequence, state, flows) embedded in
Markdown; use the drawio-aws/drawio-azure/drawio-gcp skills when the
audience expects official cloud provider icons or a standalone .drawio
artifact.
Validation
Every diagram must compile before it ships:
npx -y @mermaid-js/mermaid-cli -i diagram.mmd -o /tmp/diagram.svg
Exit code 0 = valid. For diagrams embedded in Markdown, extract the fenced
block to a temp .mmd file first. Render PNG for decks/docs with -o out.png -s 3.
C4 Model (levels 1–3)
Mermaid has first-class C4 syntax. Keep one level per diagram (see the
c4-model steering file for when to use each level).
Level 1 — System Context
C4Context
title System Context — Order Platform
Person(customer, "Customer", "Places orders via web/mobile")
System(orders, "Order Platform", "Accepts, prices, and fulfils orders")
System_Ext(payments, "Payment Gateway", "Card authorisation")
System_Ext(email, "Email Provider", "Transactional email")
Rel(customer, orders, "Browses, orders", "HTTPS")
Rel(orders, payments, "Authorises payment", "HTTPS/REST")
Rel(orders, email, "Sends confirmations", "SMTP/API")
Level 2 — Container
C4Container
title Container View — Order Platform
Person(customer, "Customer")
System_Boundary(plat, "Order Platform") {
Container(web, "Web App", "React", "Customer-facing storefront")
Container(api, "Order API", "Node.js/Fastify", "Order lifecycle endpoints")
Container(worker, "Fulfilment Worker", "Node.js", "Consumes order events")
ContainerDb(db, "Order DB", "PostgreSQL", "Orders, customers, payments")
ContainerQueue(bus, "Event Bus", "EventBridge", "OrderPlaced, OrderShipped")
}
Rel(customer, web, "Uses", "HTTPS")
Rel(web, api, "Calls", "JSON/HTTPS")
Rel(api, db, "Reads/writes", "SQL")
Rel(api, bus, "Publishes events")
Rel(bus, worker, "Delivers events")
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 170 lines · 59 tokens per session scan A be6b5c49fb55
mermaid-diagrams is a skill published in the GitHub repository ihatesea69/kiro-kit (18 stars, last pushed 21d ago), licensed MIT. It adds 59 tokens to every session and 1,498 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
diagrams
Mermaid diagrams following the C4 model: context, container, component, sequence, ER and deployment. Use when saying "diagram", "visualize", or "architecture diagram".
preview-design
Render a real artifact through this branch's local MERIDIAN design code (not the published npm package) so the team can test the new Design Convention on the document / handoff / platform surfaces before it ships. Use for /preview-design, "preview the design convention", "render this with the new design", or Design…
atomic-visual-options
Planning-phase visual comparison aid. Renders 2-4 side-by-side variants per decision dimension as a single throwaway, self-contained HTML file and captures the user's pick as typed terminal codes (e.g. "A2 B3"). Auto-fires on phrases like "show me a few options", "mock up some variants", "let me see this side by…
ppt-orchestrator
A dispatcher for creating presentations, slide decks, long images, and weekly reports. It chooses a visual style and output format, then sends the work to a more specialised add-on.
zhongguose-html-skill
An HTML-only presentation system using traditional Chinese colours and Chinese-style visual design. It helps organise source material into a report structure and produces a self-contained HTML file with its assets.
ui-design
This skill should be used when the user asks to "design a component", "pick colors", "improve typography", "fix spacing", "choose a layout", or discusses visual design, CSS, styling decisions, or responsive interfaces. Provides patterns for typography scales, color systems, spacing, and production-grade UI design.