Excalidraw Diagram Generator

• Analyzed: May 12, 2026, 3:12 AM
• Findings: 1
• Version: 1.0.0
• Hash: f5ad021820a5d26f768ea1e3ec929e50c8a9abda60ef14c8be3edf889ad6b45c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's functionality is to generate Excalidraw diagrams from JSON input and render them as PNG images. The `SKILL.md` provides clear instructions for the AI agent to generate JSON, save it to `/tmp`, and then execute a local `node` script (`scripts/render.js`) to produce a PNG, also in `/tmp`. The `scripts/setup.sh` installs necessary Node.js dependencies and downloads fonts (Virgil from `cdn.jsdelivr.net` and Cascadia Code from `github.com/microsoft`) required for rendering. The `scripts/render.js` processes local files and does not initiate any external network requests. All actions are directly aligned with the stated purpose, use standard temporary file locations, and download from legitimate sources, showing no evidence of malicious intent, data exfiltration, or prompt injection.