drawio
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The primary function of the skill is to provide the AI agent with valid XML templates and instructions for creating visual diagrams. The content is instructional and does not contain malicious code or bypass attempts.
- [EXTERNAL_DOWNLOADS]: The documentation (
references/xml_format.md) includes links to official icon repositories from well-known services and trusted organizations, such as AWS, Google Cloud Platform, and Microsoft. These are used for legitimate diagram rendering. - [COMMAND_EXECUTION]: The skill includes a PowerShell script (
publish.ps1) intended for use by the skill's author to automate Git repository setup and publishing tasks. This is a standard development tool and not an automated attack vector. - [SAFE]: The binary file
drawio.skillis a ZIP-formatted archive containing the skill's source files and documentation. Analysis of its structure reveals no hidden or obfuscated malicious payloads.
Audit Metadata