aws-drawio-architecture-diagrams
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill focuses on generating structured XML data for diagrams. The allowed 'Bash' tool is not utilized for any suspicious commands or remote code execution.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests user-provided architecture descriptions to generate XML files. It mitigates this risk by enforcing strict XML syntax and character escaping rules.
- Ingestion points: User-provided architecture descriptions (SKILL.md).
- Boundary markers: None present.
- Capability inventory: File write access (used for saving .drawio files).
- Sanitization: Explicit instructions for XML character escaping (e.g., & to &).
Audit Metadata