cli-anything-drawio
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a legitimate command-line interface for the Draw.io application, supporting standard diagramming operations like creation, editing, and exporting.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the cli-anything-drawio package via pip. This package corresponds to the author's namespace and represents a standard distribution method for Python tools.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to process external diagram files, which creates a theoretical ingestion surface for untrusted data. 1. Ingestion points: Data is ingested from project files via the open and info commands in SKILL.md. 2. Boundary markers: No specific delimiters or instructions to ignore embedded content are provided. 3. Capability inventory: The skill can write files to the local system using save and render commands. 4. Sanitization: There is no explicit mention of sanitizing diagram labels or metadata during processing.
Audit Metadata