excalidraw
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires downloading the Chromium browser binary via the command
npx playwright install chromiumto perform rendering tasks. - [EXTERNAL_DOWNLOADS]: The rendering process, as described, loads the Excalidraw rendering engine (React + Excalidraw) from a Content Delivery Network (CDN) at runtime within a headless browser.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute a local JavaScript filenode scripts/excalidraw/render.mjsfor converting Excalidraw JSON scenes into image files. - [NO_CODE]: The core logic for rendering is contained in
scripts/excalidraw/render.mjs, which was not provided for analysis; the evaluation is based on the instructions and metadata provided in SKILL.md.
Audit Metadata