excalidraw

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the excalidraw-brute-export-cli npm package and Playwright Firefox binaries to enable local image rendering and export functionalities.\n- [COMMAND_EXECUTION]: Uses git to check for version updates and pull the latest code from the project's repository, ensuring that user consent is obtained before any updates are applied.\n- [COMMAND_EXECUTION]: Performs a specific source code modification on the local excalidraw-brute-export-cli package using sed on macOS to adjust keyboard shortcut mapping for that platform.\n- [COMMAND_EXECUTION]: Utilizes curl to send diagram data to the kroki.io service for cloud-based SVG rendering, which is an intended core functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 12:30 PM