soia-dev-drawio-visio-diagrams

SUSPICIOUS. The core skill is largely coherent and locally scoped for VSDX inspection/conversion/editing, with official draw.io Desktop provenance. The main concern is the optional MCP guidance: it directs users to a third-party, unpinned npx package/repo that is inconsistent with current official draw.io MCP documentation, creating avoidable supply-chain and potential data exposure risk.