The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The Renderer class in engine/renderer.py is configured to download draw.io desktop installers directly from the official jgraph/drawio-desktop GitHub repository. This behavior is intended to resolve compatibility issues with Visio exports by providing a specific supported version (v26.0.16).
[COMMAND_EXECUTION]: The skill uses subprocess.run to manage the lifecycle of the flowchart rendering engine. This includes executing the downloaded installer for automated setup on Windows and macOS, as well as invoking the draw.io command-line interface to perform image and document exports. Automated installation requires user confirmation via an interactive prompt before proceeding.
[PROMPT_INJECTION]: The skill is designed to ingest and process user-provided natural language business process descriptions, which represents a potential indirect prompt injection surface.
Ingestion points: Step descriptions, roles, and document names extracted from user prompts and processed by the AI agent.
Boundary markers: The skill documentation provides structured data schemas (JSON/Python dicts) to help the agent delineate untrusted content before passing it to the engine.
Capability inventory: The skill has capabilities to write files (.drawio, themes), perform network downloads (official installers), and execute shell commands (rendering engine and installers).
Sanitization: All user-provided text is sanitized using html.escape in engine/flowchart_builder.py before being embedded into the .drawio XML output, effectively mitigating injection risks within the generated files.

flowchart-generator