drawio-roadmap-snake
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and workflows are focused entirely on graphic design, layout, and geometric constraints within the Draw.io ecosystem.
- [COMMAND_EXECUTION]: The skill includes a local Python script (
scripts/validate_snake_roadmap.py) intended for structural validation of .drawio XML files. A review of the source code confirms it uses standard libraries (xml.etree.ElementTree,argparse) to perform read-only checks on the XML structure (e.g., verifying cell IDs, shapes, and geometry). It does not perform network operations, execute shell commands, or access sensitive system files. - [DATA_EXFILTRATION]: No network access or data exfiltration patterns were identified. The skill operates locally on diagram files.
- [PROMPT_INJECTION]: No prompt injection patterns, role-play attempts, or safety bypass instructions were found in the skill metadata or body content.
Audit Metadata