drawio-diagram
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize the
draw.iocommand-line interface for exporting diagrams to various image and document formats. It also uses standard platform commands such asopen(macOS),xdg-open(Linux), andstart(Windows) to display the generated files. - [EXTERNAL_DOWNLOADS]: The HTML export template provided in
SKILL.mdfetches a static viewer script fromhttps://viewer.diagrams.net, which is the official domain for the diagrams.net (formerly draw.io) service. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to its primary workflow of reading external repositories and documentation to generate diagram content.
- Ingestion points: The workflow defined in
SKILL.mdinvolves reading source material such as repositories, documentation, and README files. - Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within the external source material.
- Capability inventory: The skill is capable of executing subprocesses via the
draw.ioCLI and performing file writing operations to the local filesystem. - Sanitization: While the skill recommends XML-escaping content for HTML embedding, this only protects the file structure and does not prevent the agent from following instructions embedded in the processed text.
Audit Metadata