excalidraw
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the
cryptographyPython package to perform secure data encryption. - [COMMAND_EXECUTION]: A dedicated Python script,
scripts/upload.py, is provided to handle diagram processing, encryption, and network transmission via the terminal. - [DATA_EXFILTRATION]: The utility script reads local
.excalidrawfiles and transmits the content toexcalidraw.com. The implementation uses AES-GCM client-side encryption to ensure that plaintext data is not exposed to the server, which is the standard operational model for the recognized Excalidraw service.
Audit Metadata