drawio-to-png

Fail

Audited by Socket on Feb 28, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The improved assessment confirms a coherent, multi-method workflow for converting draw.io diagrams to PNG. The primary security concern is potential data exposure when using the Puppeteer-based web rendering path that transmits diagram content to an external service. Offline/local rendering paths should be favored for sensitive data, and users should be clearly informed about privacy implications of the web-based method. The overall approach is appropriate for typical usage with balanced trade-offs between convenience and data locality.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 28, 2026, 06:05 PM
Package URL
pkg:socket/skills-sh/huyansheng3%2Fppt-skills%2Fdrawio-to-png%2F@a035fa9a4a6b346db5eb8ea39512f58a6a474819