excalidraw
v1.0.0Generate Excalidraw diagrams (.excalidraw files) from natural language descriptions. Use this skill whenever the user asks to create, draw, or visualize a di...
⭐ 0· 102·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (generate Excalidraw diagrams) match the artifacts: a SKILL.md describing how to produce diagram_input.json and a Python script that converts JSON into .excalidraw output. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions are narrow and specific: produce diagram_input.json, then run the included build_excalidraw.py in the skill directory. The SKILL.md does not request reading arbitrary system files, environment variables, or sending data externally.
Install Mechanism
There is no install spec — this is instruction + a local Python script. No downloads, external package installs, or archive extraction are specified.
Credentials
The skill declares no required environment variables, credentials, or config paths. The script uses only standard libraries (argparse, json, uuid, etc.) and operates on local files, which is proportionate to the task.
Persistence & Privilege
The skill does not request always:true or any persistent/system-wide changes. It runs on demand and only writes the generated .excalidraw file to disk as expected.
Assessment
This skill appears coherent and low-risk: it converts a structured JSON into a .excalidraw file using the included Python script and does not access network or secret material. Before running: (1) inspect any diagram_input.json the agent generates to ensure it contains only diagram data you expect; (2) run the script in an isolated or trusted environment (e.g., a project sandbox or container) if you are cautious; (3) ensure you have Python 3.6+ available. If you want extra assurance, open the full build_excalidraw.py source (it was included) and confirm it only performs local file I/O and JSON processing — no network calls or subprocess execution are present.Like a lobster shell, security has layers — review code before you run it.
latestvk970ht1gcxdgak6g1pkkx0yf8s83dywr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.