excalidraw-diagram

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Playwright library and the Chromium browser engine. These are standard, well-known development tools maintained by Microsoft and are used here for the legitimate purpose of rendering diagrams to images.
  • [COMMAND_EXECUTION]: The skill instructions guide the agent to perform setup tasks such as installing Python dependencies and executing the render_excalidraw.py script. These commands are necessary for the skill's documented functionality and do not exhibit malicious patterns.
  • [REMOTE_CODE_EXECUTION]: The rendering template dynamically loads the Excalidraw library from esm.sh, which is a well-known and widely used CDN for web modules. This code is executed within a controlled headless browser environment to perform the diagram export to SVG and PNG.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 01:36 AM