hand-drawn-diagrams
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install its full version from an external GitHub repository (
github.com/muthuishere/hand-drawn-diagrams) using thenpx skills addcommand. - [COMMAND_EXECUTION]: Shell commands including
grepandnpxare employed to verify the skill's installation status and to execute the deployment of the complete skill package. - [PROMPT_INJECTION]: The skill is designed to process user-supplied text prompts to generate hand-drawn diagrams, which presents a surface for indirect prompt injection.
- Ingestion points: Text prompts intended for diagram generation in
SKILL.md. - Boundary markers: None identified in the provided stub configuration.
- Capability inventory: Generation of SVG, PNG, and hosted edit links.
- Sanitization: No specific sanitization or filtering of input data is documented in the stub.
Audit Metadata