excalidraw
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's documentation mentions a dependency on the
cryptographyPython package for the optional upload utility. - [COMMAND_EXECUTION]: The workflow includes running a Python script (
scripts/upload.py) locally to upload generated diagram files. - [DATA_EXFILTRATION]: The included upload script reads local diagram files and transmits them to the well-known service
excalidraw.com. This is the documented primary purpose of the script and utilizes client-side encryption.
Audit Metadata