excalidraw-skill

Fail

Audited by Runlayer on Feb 22, 2026

Risk Level: HIGH
Scan Summary
Max Score
90%
Files
9
Flagged
8
Chunks
11
Flagged Files (8)
SKILL.mdHIGH
90.1%

Malicious tool definition detected

--- # Excalidraw Skill ## Step 0: Detect Connection Mode Before doing anything, determine which mode is available. Run these checks **in order**: ### Check 1: MCP Server (Best experience) ```bash mcp-cli tools | grep excalidraw ``` If you see tools like `excalidraw/batch_create_elements` → **use MCP mode**. Call MCP tools directly. ### Check 2: REST API (Fallback — works without MCP server) ```bash curl -s http://localhost:3000/health ``` If you get `{"status":"ok"}` → **use REST API mode**.

scripts/import-elements.cjsMEDIUM
58.9%

Tool passed security scan

scripts/export-elements.cjsMEDIUM
58.5%

Tool passed security scan

scripts/update-element.cjsMEDIUM
57.9%

Tool passed security scan

scripts/clear-canvas.cjsMEDIUM
53.6%

Tool passed security scan

scripts/create-element.cjsMEDIUM
52.8%

Tool passed security scan

scripts/delete-element.cjsMEDIUM
44.3%

Tool passed security scan

scripts/healthcheck.cjsMEDIUM
41.2%

Tool passed security scan

Passed Files (1)Click to expand
references/cheatsheet.mdOK
3.3%

Tool passed security scan

Audit Metadata
Max File Score
90%
Classification
UNKNOWN_SERVER
Files Scanned
9
Files Flagged
8
Chunks Analyzed
11
Analyzed
Feb 22, 2026, 05:00 AM
Security Audit — runlayer — excalidraw-skill