infra-design
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the draw.io command-line interface (e.g., /Applications/draw.io.app/Contents/MacOS/draw.io) to export system diagrams to PNG format. This is a legitimate application of the tool for its intended purpose.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes technical documentation from internal repository paths (infra/README.md and infra/basic_architecture.md). [1] Ingestion points: Technical documentation files accessed via the company-knowledge skill; [2] Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified; [3] Capability inventory: The skill can write markdown and draw.io files and execute the draw.io CLI; [4] Sanitization: No specific input validation or sanitization of the fetched documentation is described.
- [EXTERNAL_DOWNLOADS]: The skill suggests installing the draw.io desktop application using the Homebrew package manager (brew install --cask drawio), which is a well-known and trusted service.
Audit Metadata