The Agent Skills Directory

[COMMAND_EXECUTION]: The script resources/scibox-diagram/scripts/export_figure.py uses subprocess.run to call the drawio command-line utility. This is used for converting diagram source files into PDF and PNG formats for paper submission. The implementation uses a list of arguments and avoids the shell environment, which is a secure method for executing external processes.
[DYNAMIC_EXECUTION]: The skill instructions in SKILL.md include a procedure for the agent to install the @drawio/mcp server using codex mcp add if it is not already present in the environment. This is a legitimate extension mechanism designed to provide the agent with tools for advanced diagram manipulation.
[SAFE]: The skill includes several Python scripts (roadmap_5band.py, framework_3col.py, taskflow_land.py, stageflow_3col.py, and check_layout.py) that process JSON configurations into Draw.io XML. These scripts use standard Python libraries, perform capacity checks on input text, and properly escape content to ensure XML integrity and prevent injection issues.

4drawio