Back to skill
Skillv1.0.0

VirusTotal security

Draw.io CoderKnock - 智能架构图生成器 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:58 AM
Hash
6978a17666c709d4aa38e18b7b30da1ca17a944a26398859c7794c35a422a2bd
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: drawio-coderknock Version: 1.0.0 The skill generates Draw.io XML files and Mermaid diagram files based on user descriptions or predefined templates. It then attempts to open the generated .drawio file using the locally installed Draw.io application. The Python scripts use `os.startfile` (Windows) or `subprocess.run` (Linux/macOS) to launch Draw.io, passing internally constructed file paths. Input for filenames is sanitized, and Mermaid code embedded in XML is HTML-escaped. There is no evidence of data exfiltration, persistence mechanisms, external network calls, or prompt injection attempts in the documentation. The functionality aligns with its stated purpose without introducing significant vulnerabilities or malicious intent.
External report
View on VirusTotal