automating-excalidraw

Pass

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for legitimate programmatic diagram management using established libraries and local scripts without any detected malicious patterns.\n- [COMMAND_EXECUTION]: The skill uses Node.js scripts and CLI tools to perform file operations and invoke external processes for diagram processing.\n- [EXTERNAL_DOWNLOADS]: Instructions include the use of standard packages such as @excalidraw/cli and Playwright, which are typical for the stated automation purpose.\n- [DATA_EXFILTRATION]: Diagram data is programmatically sent to the official excalidraw.com web application via browser automation to facilitate export and rendering. As this targets a well-known, intended service for diagram data only, it is documented as safe.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 4, 2026, 01:44 PM
Security Audit — agent-trust-hub — automating-excalidraw