skills/gbb-acelerators/awesome-harness-primitives/azure-draw-io-diagram-generator/Gen Agent Trust Hub
azure-draw-io-diagram-generator
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes Python scripts that rely exclusively on the Python standard library, avoiding supply chain risks associated with third-party dependencies.
- [SAFE]: The
scripts/add-icon.pyandscripts/validate-drawio.pytools implement strict security controls for SVG content, specifically rejecting elements like<script>,<foreignobject>, and event handlers (e.g.,onload) to prevent cross-site scripting (XSS) or other malicious payloads within embedded diagram assets. - [SAFE]: The scripts enforce diagram self-containment by identifying and rejecting external image URLs, mitigating privacy and security risks related to tracking pixels or unauthorized data exfiltration via remote resource loading.
- [SAFE]: Domain validation is performed against official Microsoft, Azure, and GitHub endpoints to ensure that icon provenance information and source URLs are linked to authoritative first-party infrastructure.
Audit Metadata