azure-drawio-mcp-diagramming
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a maintenance script that fetches icon metadata from the official Draw.io GitHub repository. This is a well-known and trusted source for the skill's intended purpose.
- Evidence: The script
scripts/search_azure2_icons_github.pyquerieshttps://api.github.com/repos/jgraph/drawio/git/trees/dev?recursive=1to retrieve the directory structure of the icon library. - [COMMAND_EXECUTION]: The skill contains a local Python utility for managing the icon catalog. The script uses Python standard libraries and performs legitimate retrieval of open-source metadata.
- Evidence: The documentation in
SKILL.mdandreferences/REFERENCE.mddescribes runningpython3 search_azure2_icons_github.pyto refresh the local icon catalog file.
Audit Metadata