Confirm the source
Compare the repository, publisher, and installation command before continuing.
×
Third-party audit
High riskGen Agent Trust Hub
excalidraw-diagram-generator · github/awesome-copilot
Provider summary
The skill provides tools for an agent to manage Excalidraw diagrams and libraries. While the code is functional and uses standard libraries, it introduces a high risk of Indirect Prompt Injection. The agent is required to process external JSON data (icon libraries and diagram files) which can contain embedded instructions. Because the agent also has file-system write capabilities to modify diagrams, a malicious library could hijack the agent's logic during the diagram generation process.
The provider classified the analyzed snapshot as HIGH risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- fail
- Risk level
- HIGH
- Audited
- Feb 15, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. Artificial Atlas never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.