drawio-roadmap-ppt
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script (
scripts/validate_drawio.py) to verify the structural integrity of generated Draw.io XML files. It also suggests the use of thedrawiocommand-line interface for rendering diagrams into SVG or PNG formats. These operations are standard functional requirements for the skill's purpose and are conducted within the local execution environment. - [INDIRECT_PROMPT_INJECTION]: The skill contains a data ingestion surface where the
validate_drawio.pyscript parses Draw.io XML files. While this represents a potential surface for processing untrusted data, the script performs specific structural checks (IDs, geometry) and does not interpolate the content back into agent prompts in a way that would trigger logic execution. Boundary markers and sanitization for external content are not explicitly defined, but the risk is minimized by the skill's specific focus on internal diagram validation.
Audit Metadata