draw-io

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill utilizes local shell commands (drawio CLI, git, python, bash) to perform its primary functions of diagram conversion and icon retrieval. These executions are scoped to the project's assets and the skill's own script directory.
  • [DATA_EXFILTRATION] (SAFE): There are no network requests, credential access, or attempts to read sensitive system files. All data processing is local to the provided .drawio XML files.
  • [PROMPT_INJECTION] (SAFE): The instructions are focused on technical layout rules and design principles. No override markers, role-play attempts, or bypass instructions were identified.
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill does not download external code or packages at runtime. It relies on environment-provided dependencies like drawio and python.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 04:53 PM