excalidraw-diagram-generator
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides utility Python scripts (add-arrow.py, add-icon-to-diagram.py, split-excalidraw-library.py) and instructs the agent to execute them via the command line to manipulate diagram files. The scripts are used to automate ID generation, coordinate transformation, and library splitting. Evidence: SKILL.md contains detailed workflows involving shell command execution. The scripts use standard library modules (json, pathlib, uuid) to read and write diagram data safely.
- [EXTERNAL_DOWNLOADS]: The documentation directs users to download additional icon sets from https://libraries.excalidraw.com/. This is the official community resource for the Excalidraw tool and is considered a well-known service for this context.
- [SAFE]: A thorough review of the prompt instructions and the source code of the Python scripts revealed no evidence of prompt injection, data exfiltration, or unauthorized code execution. All scripts use standard library modules and do not perform network requests.
Audit Metadata