Drawio Generator.Bak
v1.0.0Generate draw.io diagrams from Mermaid, XML, or CSV code. Use this skill when the user requests any visual diagram including flowcharts, UML diagrams, ERD, a...
⭐ 0· 80·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name, description, SKILL.md, and included script all align: they take Mermaid/XML/CSV and produce a draw.io URL. Minor metadata mismatches exist (registry owner/slug vs. _meta.json ownerId/slug and missing homepage/source), which are administrative/integrity concerns but do not change the technical behavior.
Instruction Scope
SKILL.md limits runtime actions to asking the agent/user to run the provided Python script and present the resulting markdown link. It does not instruct reading unrelated files, environment variables, or sending data to other endpoints beyond the draw.io web app.
Install Mechanism
There is no install spec (instruction-only plus a small local script). No downloads or package installs are requested and nothing is written to disk by the skill itself beyond what the user runs locally.
Credentials
The skill requests no environment variables or credentials, and the script does not attempt to read secrets or external configs.
Persistence & Privilege
always is false and the skill does not request persistent presence or modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it takes diagram text, compresses and encodes it, and builds a URL that opens in the official diagrams.net web app. Before installing, consider: (1) source/origin is unknown and _meta.json metadata differs from registry metadata — if provenance matters, verify the author. (2) Do not include secrets or private credentials inside diagram text: the generated URL encodes your content and opening the link in a browser will send that data to diagrams.net. (3) Review and run the small Python script locally (it’s short and readable) rather than running untrusted binaries. If you need stronger assurance, ask the publisher for a homepage or signed release, or reimplement the URL-generation logic from the provided script yourself.Like a lobster shell, security has layers — review code before you run it.
latestvk9702jbmbegcvvr9x0937c8z1x84g2hw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.