excalidraw-agents365
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads its full implementation from the 'Agents365-ai/365-skills' GitHub repository.
- [COMMAND_EXECUTION]: Utilizes 'npx' to run installation commands and 'curl' to communicate with the Kroki API.
- [DATA_EXFILTRATION]: Transmits diagram content to 'kroki.io' for SVG conversion. This is disclosed behavior but constitutes external data transfer of potentially sensitive architectural information.
- [DYNAMIC_EXECUTION]: On macOS, the skill is designed to patch the global 'excalidraw-brute-export-cli' NPM module, which involves runtime modification of local file system contents.
Audit Metadata