drawio
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
drawiodesktop CLI for diagram conversion, layout optimization (ELK), and exporting to PNG, SVG, or PDF. It also utilizes platform-specific commands such asopen(macOS),xdg-open(Linux), andcmd.exe /c start(Windows/WSL2) to facilitate opening diagrams and URLs. - [EXTERNAL_DOWNLOADS]: Fetches Mermaid and XML reference documentation from the
jgraph/drawio-mcpGitHub repository. These downloads are directed at official sources for the purpose of ensuring syntax and style compliance. - [DYNAMIC_EXECUTION]: Employs
node -eto run inline JavaScript snippets for utility tasks, such as performing Zlib compression and Base64 encoding of XML data for web-based diagram sharing, and handling platform-specific file operations like creating.urlshortcuts on Windows. - [DATA_EXFILTRATION]: Generates browser URLs that embed compressed diagram data in the hash fragment for opening in the
app.diagrams.neteditor. This behavior is documented as a primary functional capability for cross-platform diagram viewing.
Audit Metadata