Skip to main content

drawio-skill

Generates diagrams and visualizations using draw.io, exporting to various formats like PNG and SVG for clear communication of complex systems.

Install this skill

or
63/100

Security score

The drawio-skill skill was audited on Jul 27, 2026 and we found 7 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 229

Template literal with variable interpolation in command context

SourceSKILL.md
229```bash
medium line 119

Access to hidden dotfiles in home directory

SourceSKILL.md
119- Else, check `~/.drawio-skill/styles/` for any file with `"default": true`. If found → active preset = that one.
medium line 122

Access to hidden dotfiles in home directory

SourceSKILL.md
122Load the preset JSON from `~/.drawio-skill/styles/<name>.json`, falling back to `<this-skill-dir>/styles/built-in/<name>.json`. If the named preset exists in neither location, tell the user the name i
medium line 205

Access to hidden dotfiles in home directory

SourceSKILL.md
2051. `~/.drawio-skill/styles/<name>.json` — user presets (survive `git pull`)
high line 103

Access to system keychain/keyring

SourceSKILL.md
103- Linux: download `.deb`/`.rpm` from <https://github.com/jgraph/drawio-desktop/releases> — **do not use snap** (AppArmor sandbox denies secrets/keyring on servers, causes crash)
low line 293

External URL reference

SourceSKILL.md
293Default prints a `https://viewer.diagrams.net/...#R…` viewer URL; `--edit` prints a `https://app.diagrams.net/...#create=…` URL that opens straight into the editable editor. Either way the diagram XML
low line 308

External URL reference

SourceSKILL.md
308| Export fails on Linux server (headless) | Try in order: (1) `xvfb-run -a`, (2) append `--no-sandbox` at the very end if root, (3) add `--disable-gpu`, (4) `export HOME=/tmp`, (5) install apt deps (`
Scanned on Jul 27, 2026
View Security Dashboard
Installation guide →
GitHub Stars 7
Rate this skill
Categorydesign
UpdatedOctober 27, 2026
claudecodexhermesfrontenddesignpowerpointremotiondocxgitapidatabasedevopsbackendux-designergraphic-designerproduct-designercontent-marketerproject-managerdesignmarketingproject management
gabrielmoreira/agent-skills-mirror