The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Draw.io CLI (e.g., /Applications/draw.io.app/Contents/MacOS/draw.io or drawio) to export generated XML files into PNG, SVG, PDF, and JPG formats. This is standard tool usage for diagram generation.
[EXTERNAL_DOWNLOADS]: The self-contained HTML export template includes a script reference to https://viewer.diagrams.net/js/viewer-static.min.js. This is the official viewer script for a well-known service and is used to render diagrams in the browser.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as project documentation, README files, and repository content to generate diagram plans.
Ingestion points: Source material including repositories, documentation, and README files as described in the workflow section of SKILL.md.
Boundary markers: None identified in the instructions.
Capability inventory: File system write access for .drawio and export files, and command-line execution for the Draw.io export tool.
Sanitization: The skill instructs the agent to XML-escape content when generating labels and HTML exports, which mitigates XSS risks in the generated output.

drawio-diagram