excalidraw
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill provides a legitimate utility for generating and sharing diagrams using the standard Excalidraw JSON format without any suspicious behaviors.
- [EXTERNAL_DOWNLOADS]: The upload functionality requires the 'cryptography' Python package, which is a standard and well-known library for cryptographic operations.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script (
scripts/upload.py) to handle the optional encryption and transmission of diagram data. - [DATA_EXFILTRATION]: The skill facilitates the transmission of diagram data to excalidraw.com for sharing purposes. This implementation is secure as it performs client-side AES-GCM encryption, ensuring that only users with the generated URL (which contains the key) can view the content.
Audit Metadata