Excalidraw Diagram Generator
v1.1.0Generate Excalidraw hand-drawn diagrams from natural language. Use when asked to create diagrams, flowcharts, mind maps, architecture diagrams, ER diagrams,...
⭐ 0· 41·0 current·0 all-time
bymcdowelll@mcdowell8023
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, templates, element spec, examples and the export script are all consistent with generating Excalidraw JSON and producing PNG exports. No unrelated environment variables, binaries, or credentials are requested.
Instruction Scope
SKILL.md confines actions to parsing prompts, creating .excalidraw JSON, saving it, and calling the included export script. It does require network access to fetch JS libraries (unpkg.com) and the headless-export fallback references excalidraw.com; these network calls are consistent with rendering but are external operations the user should be aware of. The SKILL.md uses a hard-coded path to the script under ~/.openclaw which assumes the skill is installed there.
Install Mechanism
There is no install spec (instruction-only), so nothing is written to disk automatically. PNG export requires users to install Playwright and Chromium (pip install playwright; playwright install chromium). Runtime loads libraries from unpkg.com (well-known CDN) — runtime network fetches are expected for rendering but mean remote JS is executed in the browser context.
Credentials
The skill requests no environment variables, credentials, or config paths. The export script writes to temporary directories and the specified output path only; no secret access is requested or required.
Persistence & Privilege
Flags are default (always:false, user-invocable:true). The skill does not request permanent/system-level privileges or modify other skills. The script runs a short-lived local HTTP server and a headless browser, which is standard for local rendering.
Assessment
This skill appears to do what it says: generate .excalidraw JSON and optionally export PNGs. Before installing/running: (1) be aware PNG export requires you to install Playwright and Chromium and will launch a headless browser (it uses --no-sandbox on Linux); (2) runtime will fetch JavaScript from CDNs (unpkg.com) or may open excalidraw.com in the fallback — this loads remote code into the browser context to render the image; (3) the export script writes temporary files and binds to localhost ports briefly (18765–18774); (4) review the included scripts if you require fully offline or high-assurance operation. If you don’t want network-loaded JS or headless Chromium, you can still use the skill to produce .excalidraw files and export them manually via excalidraw.com or a trusted local tool.Like a lobster shell, security has layers — review code before you run it.
latestvk973jp7match7b7q67gygm596x845kne
License
MIT-0
Free to use, modify, and redistribute. No attribution required.