draw-io
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell script (
convert-drawio-to-png.sh) to automate diagram conversion using the drawio CLI. This script also includes git operations to stage generated files, which is a standard part of the documented local workflow.\n- [COMMAND_EXECUTION]: A Python script (find_aws_icon.py) is used to search for AWS icons in a local reference file using regex-based text processing. It does not perform any network operations or use dangerous functions.\n- [SAFE]: No malicious behaviors such as data exfiltration, credential harvesting, or prompt injection were found. The skill's operations are limited to local file manipulation and standard developer automation.
Audit Metadata