azure-drawio-mcp-diagramming

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes a maintenance script that fetches icon metadata from the official Draw.io GitHub repository. This is a well-known and trusted source for the skill's intended purpose.
  • Evidence: The script scripts/search_azure2_icons_github.py queries https://api.github.com/repos/jgraph/drawio/git/trees/dev?recursive=1 to retrieve the directory structure of the icon library.
  • [COMMAND_EXECUTION]: The skill contains a local Python utility for managing the icon catalog. The script uses Python standard libraries and performs legitimate retrieval of open-source metadata.
  • Evidence: The documentation in SKILL.md and references/REFERENCE.md describes running python3 search_azure2_icons_github.py to refresh the local icon catalog file.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:51 AM