draw-io
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill utilizes local shell commands (
drawioCLI,git,python,bash) to perform its primary functions of diagram conversion and icon retrieval. These executions are scoped to the project's assets and the skill's own script directory. - [DATA_EXFILTRATION] (SAFE): There are no network requests, credential access, or attempts to read sensitive system files. All data processing is local to the provided
.drawioXML files. - [PROMPT_INJECTION] (SAFE): The instructions are focused on technical layout rules and design principles. No override markers, role-play attempts, or bypass instructions were identified.
- [EXTERNAL_DOWNLOADS] (SAFE): The skill does not download external code or packages at runtime. It relies on environment-provided dependencies like
drawioandpython.
Audit Metadata