excalidraw
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches library assets from the official Excalidraw community repository on GitHub (github.com/excalidraw). This is used to provide vector icons for diagrams.
- [EXTERNAL_DOWNLOADS]: Diagram source data is sent to the Kroki API (kroki.io) for SVG rendering. This is a standard and documented behavior for the tool's core functionality.
- [DYNAMIC_EXECUTION]: The instructions include a manual patch for the 'excalidraw-brute-export-cli' package using 'sed' to modify its source code. This is a targeted modification to ensure keyboard shortcut compatibility for macOS users.
- [INDIRECT_PROMPT_INJECTION]: The skill processes JSON files representing diagrams, which constitutes an entry point for external data.
- Ingestion points: Diagram files are processed by 'scripts/excalidraw_lib.py'.
- Boundary markers: None explicitly defined for the JSON content.
- Capability inventory: The skill utilizes 'curl' for network operations and 'excalidraw-brute-export-cli' for local command execution.
- Sanitization: The processing script uses standard JSON parsing and implements a filter that rejects 'image' element types to prevent unauthorized remote image inclusion.
- [COMMAND_EXECUTION]: The skill requires the use of several CLI tools, including 'curl', 'npm', and 'playwright', all of which are documented as prerequisites for the diagram export functionality.
Audit Metadata