033-architecture-diagrams

Use when you need to generate Java project diagrams — including UML sequence diagrams, UML class diagrams, C4 model diagrams, UML state machine diagrams, and ER (Entity Relationship) diagrams — through a modular, step-based interactive process that adapts to your specific visualization needs. This should trigger for requests such as Generate UML diagram; Create sequence diagram; Create class diagram; Create state machine diagram; Create C4 diagram. Part of cursor-rules-java project

Quality

75%

Does it follow best practices?

Impact

—

No eval scenarios have been run

Securityby

Advisory

Suggest reviewing before use

Optimize this skill with Tessl

npx tessl skill review --optimize ./skills/033-architecture-diagrams/SKILL.md

1 medium severity finding. This skill can be installed but you should review these findings before use.

Medium

W012: Unverifiable external dependency detected (runtime URL that controls agent)

What this means

The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.

Why it was flagged

Potentially malicious external URL detected (high risk: 0.90). The skill explicitly fetches and executes remote code at runtime (curl -L -o plantuml.jar https://github.com/plantuml/plantuml/releases/latest/download/plantuml.jar then java -jar plantuml.jar) and also embeds PlantUML !include directives that pull remote content at render time (e.g. https://raw.githubusercontent.com/plantuml-stdlib/C4-PlantUML/master/C4_Context.puml), so these URLs are runtime dependencies that can execute code or control rendering.

Report incorrect finding

Repository: jabrena/cursor-rules-java
Commit: 26e9744

Audited: about 17 hours ago
Security analysis

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.