class-diagram
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the local tldraw offline application using dedicated helper scripts (
scripts/tqandscripts/new-canvas). These scripts facilitate communication with the application's local API on localhost using standard tools likecurlandpython3for basic operations. - [SAFE]: File system access is restricted to the user's dedicated canvas directory (
~/canvas) and specific application configuration paths required to retrieve a local authentication token, which is consistent with the skill's documented purpose. - [SAFE]: The skill includes a template file (
assets/blank.tldraw) to ensure new diagrams are initialized correctly. Analysis of this file indicates it is a standard SQLite database compressed in a ZIP archive, conforming to the application's expected format without malicious payloads. - [SAFE]: Instructions and references provided in the skill point toward well-known, reputable domain authorities for technical specifications and standards (e.g., MDN, D3.js, and official UML resources).
Audit Metadata