skills/hoangsoft90/ai_skills/drawio/Gen Agent Trust Hub

drawio

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the drawio desktop CLI for diagram conversion, layout optimization (ELK), and exporting to PNG, SVG, or PDF. It also utilizes platform-specific commands such as open (macOS), xdg-open (Linux), and cmd.exe /c start (Windows/WSL2) to facilitate opening diagrams and URLs.
  • [EXTERNAL_DOWNLOADS]: Fetches Mermaid and XML reference documentation from the jgraph/drawio-mcp GitHub repository. These downloads are directed at official sources for the purpose of ensuring syntax and style compliance.
  • [DYNAMIC_EXECUTION]: Employs node -e to run inline JavaScript snippets for utility tasks, such as performing Zlib compression and Base64 encoding of XML data for web-based diagram sharing, and handling platform-specific file operations like creating .url shortcuts on Windows.
  • [DATA_EXFILTRATION]: Generates browser URLs that embed compressed diagram data in the hash fragment for opening in the app.diagrams.net editor. This behavior is documented as a primary functional capability for cross-platform diagram viewing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 01:42 PM
Security Audit — agent-trust-hub — drawio