aws-architecture-diagram
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to utilize the draw.io desktop application's CLI for exporting diagrams (e.g.,
drawio -x -f png) and to use system utilities likeopenorxdg-opento display the results. This execution is scoped to the primary functionality of the skill. - [EXTERNAL_DOWNLOADS]: The instructions reference official style and XML schemas hosted on the jgraph (draw.io) GitHub repository. These references provide the agent with necessary formatting rules from a well-known technology provider.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user requirements to generate architectural diagrams. While it does not implement specific sanitization or delimiters for the user input, the risk is mitigated by the fact that the input is used to generate structured XML for a specific rendering engine, which has a narrow execution scope.
Audit Metadata