drawio-roadmap-swimlane
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a local Python script
scripts/validate_drawio.pyand instructs the agent to execute it usingpython3to verify the integrity of generated diagrams. The script performs safe XML parsing using standard Python libraries without triggering any subprocesses or network requests. - [EXTERNAL_DOWNLOADS]: The documentation references official resources for opening diagrams, including the
jgraph/drawio-desktopGitHub repository and theapp.diagrams.netweb service. These are well-known, trusted services, and the references are purely informative for the user. - [SAFE]: A detailed analysis of the skill instructions, metadata, and provided assets revealed no evidence of prompt injection, data exfiltration, or obfuscation. The build procedure follows best practices by including a local validation script for generated content.
Audit Metadata