The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a Bash script (scripts/convert-drawio-to-png.sh) that automates the conversion of .drawio files to PNG using the drawio CLI tool and uses git add to stage the generated images. These operations are restricted to the local environment and are consistent with the skill's stated purpose.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process and edit .drawio (XML) files, which represents a potential surface for indirect prompt injection if the agent processes a maliciously crafted diagram file.
Ingestion points: Processes .drawio XML files in SKILL.md and via conversion scripts.
Boundary markers: No explicit delimiters or warnings for the XML content are implemented.
Capability inventory: File system access and shell command execution via local scripts (scripts/convert-drawio-to-png.sh).
Sanitization: The shell script employs proper variable quoting to prevent command injection through file paths.

draw-io