uml-drawing
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with "https://editor.besser-pearl.org" to render UML models. This is an official vendor endpoint used to generate SVG images from B-UML code.- [COMMAND_EXECUTION]: Uses "curl" to interact with the BESSER rendering API. The execution is limited to uploading model files and saving the returned image assets to the local repository.- [DATA_EXFILTRATION]: Modeling data created by the agent is sent to the vendor's API for processing. The transmitted data consists of structural UML definitions and does not include sensitive system information or user credentials.- [PROMPT_INJECTION]: An indirect prompt injection surface exists because the skill reads local source code to extract modeling information.
- Ingestion points: Local source files read by the agent (SKILL.md workflow).
- Boundary markers: None provided to separate code content from instructions.
- Capability inventory: Subprocess execution (curl) and file-writing capabilities.
- Sanitization: The skill relies on the agent's internal logic to parse the code structure rather than automated sanitization filters.
Audit Metadata