excalidraw

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires downloading the Chromium browser binary via the command npx playwright install chromium to perform rendering tasks.
  • [EXTERNAL_DOWNLOADS]: The rendering process, as described, loads the Excalidraw rendering engine (React + Excalidraw) from a Content Delivery Network (CDN) at runtime within a headless browser.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local JavaScript file node scripts/excalidraw/render.mjs for converting Excalidraw JSON scenes into image files.
  • [NO_CODE]: The core logic for rendering is contained in scripts/excalidraw/render.mjs, which was not provided for analysis; the evaluation is based on the instructions and metadata provided in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 09:45 AM