excalidraw-diagram-generator
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes local Python utility scripts for file manipulation and diagram assembly.
- The script
scripts/split-excalidraw-library.pyperforms filename sanitization using regular expressions to prevent path traversal when extracting icons from user-provided library files. - The scripts
scripts/add-arrow.pyandscripts/add-icon-to-diagram.pyusepathliband the standardjsonlibrary for robust file handling and data serialization. - [SAFE]: External URL references are restricted to official and well-known services essential to the skill's function.
SKILL.mdrefers toexcalidraw.comandlibraries.excalidraw.comfor diagram visualization and obtaining official icon sets, which are recognized as safe sources.- [SAFE]: No obfuscation, prompt injection, or suspicious data handling patterns were identified.
- Instructions in
SKILL.mdare purely functional and focus on the legitimate generation of diagrams. - All script-based data processing occurs on the local filesystem without unauthorized network activity or credential exposure.
Audit Metadata