please-drawio-turn

• Outcome: Review
• Latest audit: May 27, 2026, 9:34 AM
• Version:
  2.2.0

Overview

This diagram skill is mostly coherent, but it should be reviewed because it can launch local files/apps and automatically mutate/prune diagram backup files without tight scoping.

Install only if you are comfortable with a skill that writes diagram files, opens local applications for preview, and manages hidden local backup versions. Prefer using it on non-sensitive workspaces, avoid using the open command on arbitrary paths, and review generated/restored files before relying on the version history. VirusTotal and the static scan were clean, and I did not find evidence of network exfiltration or credential access.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Context-Inappropriate Capability

Medium

• Confidence: 95% confidence
• Finding: The `open_file`/`cmd_open` flow will open any path supplied by the user via `os.startfile`, not just generated `.drawio` files. In a skill context, this broadens capability from diagram generation to arbitrary local file/application launching, which can expose sensitive files or trigger execution through dangerous file associations such as scripts, shortcuts, or executables.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The skill description states that it will generate `.drawio` files and open them with draw.io, but it does not clearly disclose that this causes local file creation and launches a desktop application on the user's machine. Automatic app launch expands the action from passive content generation to local execution behavior, which can surprise users and create risk if the generated file path or content is unsafe.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The output specification requires automatically opening the generated diagram after creation, again without a clear safety prompt or consent gate. Even though draw.io files are expected output for this skill, automatic desktop application launch is a privileged side effect that can be abused for nuisance, unexpected local execution, or opening attacker-influenced content without sufficient user awareness.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The guide mandates automatic deletion of older versions and automatic backup/restore behavior without clearly warning the user that files will be modified and historical data may be pruned. In a file-editing skill, this can lead to unintended data retention, silent file mutation, or loss of recoverability, especially when users assume non-destructive preview behavior.

VirusTotal

66/66 vendors flagged this skill as clean.