The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches SVG icons and technical assets from well-known and reputable CDNs like unpkg.com, cdn.simpleicons.org, and raw.githubusercontent.com. These downloads are used to build internal icon catalogs and provide brand logos for diagrams. Use of these well-known services for static assets is common and considered safe in this context.
[COMMAND_EXECUTION]: The skill executes local commands for diagram rendering and layout optimization. Specifically, it invokes the drawio desktop CLI to export diagrams to PNG and Graphviz's dot utility for automated node placement. These executions are performed using safe Node.js and Python APIs that prevent shell injection by passing arguments as arrays rather than as a single shell string.
[SAFE]: The project includes proactive security measures, such as a directory traversal guard in the diagram builder that prevents the AI from writing files into the skill's own directory structure. The installer and utility scripts avoid the use of high-privilege commands like sudo and explicitly document their local-only execution model.

drawio-aws-architect