explain-diagram
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the Excalidraw MCP server and its GitHub repository for documentation and schema details. These are well-known resources for diagramming tools.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied descriptions to generate visual diagrams, representing a surface for processing untrusted data.
- Ingestion points: User-provided descriptions of systems, concepts, or workflows in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters for separating user input from system instructions.
- Capability inventory: Usage of the
create_viewMCP tool and file-writing capabilities for generating.excalidrawfiles. - Sanitization: The skill is instructed to adhere to the Excalidraw JSON element schema, which restricts the output to valid visualization components.
Audit Metadata