Draw.io CoderKnock - 智能架构图生成器

一键生成多层系统架构流程图，自动检测并打开本地 Draw.io，支持电商和CEX交易所架构模板，提供清晰泳道视图。

Security Scan

The skill largely does what it claims (generate .drawio files, detect and open local Draw.io), but there are a few incoherent/odd bits (a hard-coded user workspace path in simple_test.py and minor manifest/template mismatches) that warrant caution before installing or running.

Purpose & Capability

The name/description (Draw.io flow/architecture generator) matches the included code: generators produce .drawio XML and .mmd templates and attempt to open local Draw.io. However, simple_test.py contains a hard-coded path (C:\Users\opens\.openclaw\workspace) that is not justified by the skill's stated purpose and appears to be a leftover/test artifact. Also SKILL.md/README mention a templates/ folder but the packaged manifest did not include a templates directory — the code will create one at runtime, which is plausible but worth noting.

Instruction Scope

SKILL.md instructs running Python scripts to generate files and will attempt to detect and launch local Draw.io. The runtime instructions and code are consistent: scripts write .mmd and .drawio files, print instructions, and try to open the Draw.io app. There is no code that reads arbitrary system files or environment variables, and no network exfiltration endpoints. The only scope creep is the test script writing to a specific user path outside the usual working-directory behavior.

Install Mechanism

There is no install spec; this is an instruction-and-script-only skill that uses the Python standard library. No downloads or archive extraction are performed by the skill itself, so install risk is low.

Credentials

The skill requires no environment variables or credentials, which is appropriate. The concern is that simple_test.py writes into a hard-coded user-specific path (C:\Users\opens\.openclaw\workspace). Writing into an arbitrary user path without creating directories or asking the caller is unusual and may be unintended. Otherwise there are no credential requests or unnecessary env access.

Persistence & Privilege

The skill does not request persistent/always-on privileges and does not modify other skills or global agent settings. It only writes files into the chosen workspace and tries to launch a local draw.io executable — this is within reasonable scope for the described functionality.

What to consider before installing

The skill appears to implement its described functionality and is not networked or exfiltrating secrets, but there are small red flags you should review before installing or running it: - Inspect or remove simple_test.py before running. It writes to a hard-coded path (C:\Users\opens\.openclaw\workspace), which looks like a developer/test artifact and could unexpectedly modify that location if it exists on your system. - Run generators in a safe/sandboxed workspace (pass --workspace or run from a disposable directory) so generated files land where you expect. Example: python generate_flow.py "My Flow" --workspace /tmp/drawio-test - Review generated .drawio/.mmd files before opening them in Draw.io if you have strict policies. The scripts write XML to disk and then attempt to open the local draw.io application; opening local binaries is expected but be cautious on shared systems. - Verify the repository/source trust (package.json repo URL exists) if you need provenance. If you require stricter assurance, ask the author to remove test artifacts and confirm the templates included in the published package. If you want, I can point out the exact lines in simple_test.py and suggest a safe edit (e.g., remove the hard-coded path or replace with a workspace parameter) before you run the package.

🎨 Draw.io 流程图生成器

智能流程图生成技能 - 一键生成专业的系统架构图和流程图，自动检测并使用本地 Draw.io。

功能特性

• ✅ 直接生成真正的 draw.io 文件，包含完整图形元素
• 🔍 自动检测本地 Draw.io 安装状态
• 🚀 自动打开本地 Draw.io 并显示完整流程图
• 💡 未安装时提供友好的安装指引
• 🎨 使用泳道图展示，层次清晰
• 🎯 预设电商系统架构图和 CEX 交易所架构图模板
• 🌈 优化的配色方案，高对比度，文字清晰可见

快速开始

使用稳定版本（推荐）：

# 生成电商系统架构图
python stable_generator.py

# 生成 CEX 交易所架构图
python cex_architecture_v2.py

# 指定工作目录
python stable_generator.py --workspace /path/to/workspace

稳定版本特点：

• 直接生成完整的 draw.io XML 文件
• 包含真实的图形元素，无需 Mermaid 导入
• 使用泳道图展示系统架构
• 自动检测并打开本地 Draw.io
• 优化的配色方案，文字清晰

预设模板

1. 电商系统架构图

• 5层完整架构：用户层、接入层、应用层、数据层、基础设施层
• 包含完整的电商微服务组件
• 文件：stable_generator.py

2. CEX 交易所整体架构图

• 6层完整架构：用户接入层、网关层、交易核心层、数据层、区块链层、运维层
• 包含撮合引擎、风控、热钱包/冷钱包等核心组件
• 优化的配色方案，高对比度
• 文件：cex_architecture_v2.py

安装 Draw.io

Windows

winget install drawio

Mac

brew install --cask drawio

手动下载

访问：https://github.com/jgraph/drawio-desktop/releases

使用说明

1. 运行对应的生成器脚本
2. 脚本会自动生成 .drawio 文件
3. 如果本地安装了 Draw.io，会自动打开
4. 如果没有安装，会提示安装方式
5. 在 Draw.io 中可以直接编辑和导出

文件结构

skills/drawio-flow-generator/
├── SKILL.md                    # 本文件
├── package.json                # 技能配置
├── README.md                   # 详细使用说明
├── stable_generator.py         # 电商架构图生成器（稳定版）
├── cex_architecture_v2.py      # CEX 交易所架构图（优化配色）
├── generate_flow.py            # 通用流程图生成器
├── simple_test.py              # 简单测试脚本
└── templates/                  # Mermaid 模板库
    ├── login_flow.mmd
    ├── order_flow.mmd
    ├── approval_flow.mmd
    ├── generic_flow.mmd
    └── ecommerce_architecture.mmd

作者

AI Assistant

欢迎关注

欢迎关注微信公众号：拿客

获取更多技术干货和开源工具分享！

许可证

MIT License