drawio
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves reference material from an external repository to guide diagram generation.
- Evidence: Fetches XML schema and styling information from the official JGraph (Draw.io) GitHub repository at
https://raw.githubusercontent.com/jgraph/drawio-mcp/main/shared/xml-reference.md. - [COMMAND_EXECUTION]: The skill executes local command-line tools and system utilities to perform its primary functions.
- Evidence: Uses the Draw.io CLI (
drawio) for exporting diagrams to formats like PNG, SVG, and PDF. - Evidence: Employs platform-specific commands including
open,xdg-open, andcmd.exeto display the resulting files to the user. - Evidence: Optionally utilizes the
@drawio/postprocessNode.js package vianpxto optimize diagram layout when available.
Audit Metadata