ClawHub

Drawio Skill

v1.1.1

Use when user requests diagrams, flowcharts, architecture charts, or visualizations. Also use proactively when explaining systems with 3+ components, complex...

⭐ 1· 30·0 current·0 all-time
byAgents365.ai@agents365-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (draw.io diagrams) match the declared dependencies and behavior: the skill requires the draw.io desktop CLI, proposes installing via Homebrew on macOS, generates .drawio XML files, exports to PNG/SVG/PDF, and offers a browser fallback. No unrelated credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
Runtime instructions are narrowly focused on generating XML, exporting via the draw.io CLI, and iteratively editing the XML based on user feedback. The only notable behavior is the optional 'self-check' step that uses a vision-enabled model to read exported PNGs and auto-fix layout issues — this means exported images may be provided to whatever model backend performs vision analysis (expected for the feature). The skill writes files to the user's working directory and may auto-open the desktop app for manual edits (both expected).
✓
Install Mechanism
Install spec is a Homebrew cask/formula for drawio (standard, well-known source). The README also documents downloading official drawio-desktop releases for Linux/Windows. No arbitrary or obfuscated downloads or extract/install steps from unknown hosts are present in the provided metadata.
✓
Credentials
No environment variables, secrets, or external credentials are requested. The skill's actions (file writes, CLI invocation) do not require elevated permissions or unrelated credentials.
✓
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide agent settings. agents/openai.yaml sets allow_implicit_invocation (implicit invocation/auto-trigger) which is a normal policy choice for convenience; this increases autonomous invocation surface but is not in itself a coherence problem.
Assessment
This skill appears to be what it claims: it generates .drawio XML and uses the local draw.io CLI to export images. Before installing or allowing the agent to run it: 1) ensure you have draw.io desktop installed (macOS Homebrew, or official releases for Linux/Windows); 2) be aware the optional self-check step will send the exported PNG to whatever vision-capable model the agent uses — if that model runs remotely, the image will leave your machine for analysis; disable or skip self-check if you don't want that; 3) the included scripts (e.g., scripts/check-update.sh) contact the configured git remote when you run them — only run/update from a trusted clone; and 4) if you prefer the agent not to auto-trigger this skill, adjust the agent's skill/implicit-invocation settings. Overall, the files and instructions are proportionate to the stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk97864ywq83tgfv56t0m9xdvph84apyx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📐 Clawdis
OSmacOS · Linux · Windows
Any bindraw.io, drawio

Install

Install draw.io via Homebrew
Bins: draw.io
brew install drawio

Comments