The Agent Skills Directory

[SAFE]: The skill is functionally focused on generating Excalidraw diagram files from codebase analysis. A thorough review of all instructions, pseudo-code algorithms, and JSON examples found no evidence of malicious intent, credential exfiltration, or unauthorized command execution.
[PROMPT_INJECTION]: The skill inherently possesses an indirect prompt injection surface because it is designed to ingest and process untrusted data from the user's codebase (e.g., README files, configuration files, and source code) to generate diagrams. However, the risk is negligible as the agent's output is restricted to generating structured Excalidraw JSON files.
Ingestion points: SKILL.md (Workflow Step 1) instructs the agent to analyze the codebase using tools like Glob, Grep, and Read to find components and relationships.
Boundary markers: The instructions do not specify the use of delimiters or 'ignore' warnings for the data ingested from the codebase.
Capability inventory: The skill utilizes codebase scanning tools (Glob, Grep, Read) and performs file writing (saving the .excalidraw JSON file).
Sanitization: There are no specific instructions for sanitizing or escaping the content read from the codebase before processing it into labels or metadata within the diagram.

excalidraw