ai-drawio

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.80). The skill embeds the remote diagrams.net viewer at https://viewer.diagrams.net/ in an iframe at runtime (with the URL-encoded mxfile in the fragment), which executes remote viewer code in the user's browser and is relied upon to render the diagram.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 11:21 AM