excalidraw-mcp-server
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Excalidraw MCP app from the official Excalidraw GitHub releases page and includes code templates that load the React and Excalidraw libraries from the well-known unpkg.com CDN.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an MCP tool interface that takes external input (elements and description). The provided template for generating the HTML response interpolates the description argument directly into a title tag without sanitization, creating a potential cross-site scripting (XSS) surface in the rendered output. Ingestion points: draw_diagram tool arguments. Boundary markers: Absent in the HTML generation template. Capability inventory: Generates interactive HTML resources. Sanitization: Uses JSON.stringify for complex elements but lacks sanitization for the description field.
- [DYNAMIC_EXECUTION]: The skill includes a generateExcalidrawHTML function that dynamically constructs an HTML document containing JavaScript based on runtime data provided to the tool.
Audit Metadata