skills/fikriaf/agentos/excalidraw/Gen Agent Trust Hub

excalidraw

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized behaviors were detected. The skill's components are consistent with its stated purpose of diagram generation and sharing.\n- [EXTERNAL_DOWNLOADS]: The skill documentation mentions a dependency on the cryptography Python package, which is a standard and trusted library for cryptographic operations.\n- [DATA_EXFILTRATION]: The included scripts/upload.py transmits diagram data to the official Excalidraw endpoint (json.excalidraw.com). This transmission is essential to the skill's functionality and implements client-side AES-GCM encryption, ensuring that the plaintext content is not accessible to the server.\n- [COMMAND_EXECUTION]: The workflow involves executing a local Python script provided with the skill via the terminal. This is used for file uploads as part of the core feature set.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 09:07 AM
Security Audit — agent-trust-hub — excalidraw