use-case-diagram
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes two shell scripts,
scripts/new-canvasandscripts/tq, which are used to automate the tldraw offline application.new-canvashandles the creation of new diagram files by copying a template and opening them using the system'sopencommand.tqacts as a helper to send commands to the application's local HTTP API. - [DATA_EXPOSURE]: The
scripts/tqscript accesses the application's local configuration file (server.json) to retrieve the port and a bearer token required for API authentication. This access is restricted to the local environment for the purpose of controlling the tldraw application. - [EXTERNAL_DOWNLOADS]: The documentation references
offline.tldraw.comas the official source for downloading the tldraw application. This is a legitimate and documented external reference for the required software.
Audit Metadata