excalidraw-diagram-generator

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes local Python utility scripts for file manipulation and diagram assembly.
  • The script scripts/split-excalidraw-library.py performs filename sanitization using regular expressions to prevent path traversal when extracting icons from user-provided library files.
  • The scripts scripts/add-arrow.py and scripts/add-icon-to-diagram.py use pathlib and the standard json library for robust file handling and data serialization.
  • [SAFE]: External URL references are restricted to official and well-known services essential to the skill's function.
  • SKILL.md refers to excalidraw.com and libraries.excalidraw.com for diagram visualization and obtaining official icon sets, which are recognized as safe sources.
  • [SAFE]: No obfuscation, prompt injection, or suspicious data handling patterns were identified.
  • Instructions in SKILL.md are purely functional and focus on the legitimate generation of diagrams.
  • All script-based data processing occurs on the local filesystem without unauthorized network activity or credential exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 05:35 PM
Security Audit — agent-trust-hub — excalidraw-diagram-generator