drawio-export-tools
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external resources for its functionality, all hosted under the author's GitHub account or Docker Hub namespace:
- GitHub Action:
rlespinasse/drawio-export-action@v2 - Docker Images:
rlespinasse/drawio-exportandrlespinasse/drawio-desktop-headless - Rust Library:
drawio-exporterhosted atgithub.com/rlespinasse/drawio-exporter. - [COMMAND_EXECUTION]: The instructions include various command-line examples for local and CI/CD execution:
docker runcommands with volume mounting (-v $(pwd):/data) to process local files.- Shell commands like
sed,mv, andconvert(ImageMagick) are suggested in the 'Advanced Section' for pre- and post-processing of diagram files. - [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface for indirect prompt injection as it is designed to process external
.drawio(XML-based) files. - Ingestion points: Diagram files provided by the user and processed via Docker or GitHub Actions (e.g.,
diagram.drawio). - Boundary markers: None identified in the provided command examples or instructions.
- Capability inventory: File system access (via Docker volumes), process execution (
docker,sed,convert), and workflow automation (GitHub Actions). - Sanitization: No specific sanitization or validation of the XML content is described within the skill's instructions.
Audit Metadata