excalidraw
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized behaviors were detected. The skill's components are consistent with its stated purpose of diagram generation and sharing.\n- [EXTERNAL_DOWNLOADS]: The skill documentation mentions a dependency on the
cryptographyPython package, which is a standard and trusted library for cryptographic operations.\n- [DATA_EXFILTRATION]: The includedscripts/upload.pytransmits diagram data to the official Excalidraw endpoint (json.excalidraw.com). This transmission is essential to the skill's functionality and implements client-side AES-GCM encryption, ensuring that the plaintext content is not accessible to the server.\n- [COMMAND_EXECUTION]: The workflow involves executing a local Python script provided with the skill via the terminal. This is used for file uploads as part of the core feature set.
Audit Metadata