class-diagram

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts with the local tldraw offline application using dedicated helper scripts (scripts/tq and scripts/new-canvas). These scripts facilitate communication with the application's local API on localhost using standard tools like curl and python3 for basic operations.
  • [SAFE]: File system access is restricted to the user's dedicated canvas directory (~/canvas) and specific application configuration paths required to retrieve a local authentication token, which is consistent with the skill's documented purpose.
  • [SAFE]: The skill includes a template file (assets/blank.tldraw) to ensure new diagrams are initialized correctly. Analysis of this file indicates it is a standard SQLite database compressed in a ZIP archive, conforming to the application's expected format without malicious payloads.
  • [SAFE]: Instructions and references provided in the skill point toward well-known, reputable domain authorities for technical specifications and standards (e.g., MDN, D3.js, and official UML resources).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:42 PM
Security Audit — agent-trust-hub — class-diagram