generating-aws-diagrams — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited generating-aws-diagrams (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generates professional DrawIO XML diagrams for Amazon Web Services architectures.
There are two icon types. Use service icons when labeling the AWS service itself, and instance icons when representing a specific resource.
Service icon (colored square background) — for labeling the service:
shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.{shape_name}Instance icon (bare icon, no background) — for specific resources:
shape=mxgraph.aws4.{shape_name};fillColor={category_color}CRITICAL: Always keepfillColorset to the category color. Without it the icon renders white/invisible. The only difference from a service icon is the absence of theresourceIconbackground square — never removefillColorwhen using an instance icon.
| Scenario | Icon Type | Label Example |
|---|---|---|
| The AWS service itself | Service (with background) | "AWS Lambda", "Amazon RDS" |
| A specific resource/instance | Instance (no background) | "Order Processor", "Users Table" |
| Multiple instances of same service | Instance (no background) | "ECS Task 1", "ECS Task 2" |
Multi-word AWS shape names use UNDERSCORES in style properties!
step_functions (correct)api_gateway (correct)kinesis_data_streams (correct)step functions (WRONG - will not render)api gateway (WRONG - will not render)The aws4.xml stencil defines names with spaces, but DrawIO's style parser requires underscores.
Always look up exact names in `assets/aws-icons.json` before using.
| Service | Service Icon (with background) | Instance Icon (no background) |
|---|---|---|
| Lambda | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.lambda | shape=mxgraph.aws4.lambda |
| Amazon S3 | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.s3 | shape=mxgraph.aws4.s3 |
| Amazon EC2 | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.ec2 | shape=mxgraph.aws4.ec2 |
| DynamoDB | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.dynamodb | shape=mxgraph.aws4.dynamodb |
| API Gateway | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.api_gateway | shape=mxgraph.aws4.api_gateway |
| Amazon SQS | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.sqs | shape=mxgraph.aws4.sqs |
| Amazon SNS | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.sns | shape=mxgraph.aws4.sns |
| Step Functions | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.step_functions | shape=mxgraph.aws4.step_functions |
| Amazon ECS | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.ecs | shape=mxgraph.aws4.ecs |
| Amazon RDS | shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.rds | shape=mxgraph.aws4.rds |
| Container | Use Case |
|---|---|
| aws_cloud | Top-level AWS Cloud boundary |
| aws_region | Region grouping |
| aws_availability_zone | AZ grouping |
| aws_vpc | VPC boundary |
| aws_public_subnet | Public subnet |
| aws_private_subnet | Private subnet |
| aws_security_group | Security group boundary |
| aws_auto_scaling_group | Auto scaling group |
| aws_account | AWS Account boundary |
| aws_corporate_datacenter | Corporate datacenter |
| aws_generic_group | Generic grouping |
| aws_step_functions_workflow | Step Functions workflow |
| aws_elastic_beanstalk_container | Elastic Beanstalk app |
Use this workflow to extract and document all components from an existing DrawIO file.
.drawio XML file<mxCell> elementsvertex="1"edge="1"parent attribute.drawio fileGenerate a Markdown report with:
# DrawIO Analysis Report
## Summary
- Total shapes: X
- Total connections: Y
- Containers: Z
## Shape Inventory
| ID | Label | Type | Position | Parent |
|----|-------|------|----------|--------|
| abc | Lambda | mxgraph.aws4.lambda | (100,200) | vpc1 |
## Connection Matrix
| From | To | Label | Type |
|------|-----|-------|------|
| Lambda | DynamoDB | API | solid |
## Container Hierarchy
- VPC (vpc1)
- Lambda (lambda1)
- Lambda (lambda2)
- DynamoDB (db1)
## Style Analysis
### Unique Shapes Found
- mxgraph.aws4.lambda (4 instances)
- mxgraph.aws4.dynamodb (2 instances)Use this workflow to recreate an AWS architecture diagram from an image.
assets/aws-icons.json by visual signature or labelassets/aws-containers.jsonstep_functions, not step functions)assets/templates/drawio-base.xml.drawio XML file# Conversion Confidence Report
## Overall Confidence: 85%
## Identified Components
### High Confidence (>90%)
- Lambda x4 - Clear icon match
- DynamoDB x2 - Clear icon match
- VPC container - Purple border, correct label
### Medium Confidence (70-90%)
- Step Functions - Icon similar, label confirms (using `step_functions` with underscores)
### Low Confidence (<70%)
- Unknown icon at position (300, 400) - Mapped to generic service
## Connection Accuracy
- 12/14 connections clearly visible
- 2 connections inferred from layout
## Notes
- VPC subnet grouping identified
- Bidirectional arrows on 3 connectionsUse this workflow to generate a new AWS diagram from text specifications.
assets/aws-icons.jsonassets/aws-containers.jsonassets/templates/drawio-base.xml as starting point.drawio XML fileCreate an AWS serverless architecture with:
- VPC container
- API Gateway triggering Lambda
- Lambda connecting to DynamoDB and S3
- Step Functions orchestrating the workflow<mxfile ...>
<diagram name="AWS Architecture">
<mxGraphModel ...>
<root>
<mxCell id="0" />
<mxCell id="1" parent="0" />
<!-- VPC Container -->
<mxCell id="vpc" value="VPC" style="..." vertex="1" parent="1">
<mxGeometry x="50" y="50" width="700" height="400" />
</mxCell>
<!-- API Gateway -->
<mxCell id="api_gateway" value="API Gateway" style="...resIcon=mxgraph.aws4.api_gateway" vertex="1" parent="vpc">
<mxGeometry x="50" y="100" width="64" height="64" />
</mxCell>
<!-- More shapes... -->
<!-- Connections -->
<mxCell id="conn_api_gateway_to_lambda" edge="1" source="api_gateway" target="lambda" style="..." />
</root>
</mxGraphModel>
</diagram>
</mxfile>assets/aws-icons.jsonservice_name or recognition_keywordsdrawio_shape.full_style for complete stylingshape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.{shape_name}Service Coverage:
references/ICON-COMPATIBILITY.md for the list. For these, use a visually similar validated service icon or a generic shape.#232F3ELook up the exact category, fillColor, and full_style for any service in assets/aws-icons.json. All 24 categories with colors are listed there.
See references/DIAGRAM-BEST-PRACTICES.md for full guidelines. Key rules:
labelBackgroundColor=#FFFFFF;fontSize=10;fontColor=#232F3E;1 for most connections, 2 only for primary data paths (max 1–3 per diagram)For complete XML examples and detailed structure, see references/xml-examples.md.
The key building blocks:
<mxCell id="api_gateway" value="Label" style="..." vertex="1" parent="1"> with <mxGeometry><mxCell id="conn_api_gateway_to_lambda" edge="1" source="api_gateway" target="lambda" style="...">container=1 in style; children set parent to container ID<mxCell id="0"/> and <mxCell id="1" parent="0"/>api_gateway, not apigw; step_functions, not stepfnlambda_api_handler, lambda_processor, not lambda1, lambda2conn_{source}_to_{target} using full IDsSee references/DIAGRAM-BEST-PRACTICES.md for complete ID naming convention.
For XML parsing and extraction techniques, see references/xml-parser-guide.md.
step_functions, NOT step functionsshape=mxgraph.aws4.resourceIcon AND resIcon=mxgraph.aws4.{name} are presentshape=mxgraph.aws4.{name} is used directly (no resourceIcon wrapper)productIcon/prIcon — always use resourceIcon/resIcon for service iconsvertex="1" is present<mxGeometry> has valid width/height (64x64)See the Quick Reference section for the full definition of each icon type. In summary:
shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.{name} — labels the AWS service itselfshape=mxgraph.aws4.{name};fillColor={category_color} — represents a specific resource; fillColor is required or the icon renders whiteedge="1" is setparent attribute to container's IDcontainer=1 in stylevalue attribute is setfontSize is reasonable (12-14 for AWS)fontColor=#232F3E is setid="0" and id="1" root cells exist
 for newlines)After generating a .drawio file, you can validate and preview it:
python scripts/validate-drawio.py output.drawio --verbosepython scripts/analyze-existing.py output.drawio --markdownpython scripts/validate-aws-icons.py./scripts/export-diagram.sh output.drawio png./scripts/open-diagram.sh output.drawioRequires DrawIO Desktop. Install on macOS: brew install drawio
| File | Purpose |
|---|---|
SKILL.md | This file - main instructions |
| Assets | |
assets/aws-icons.json | AWS service icon database (264 services) |
assets/aws-containers.json | AWS container/group and connection styles |
assets/templates/drawio-base.xml | Base XML template |
assets/templates/node-template.xml | Shape insertion template |
assets/templates/connection-template.xml | Connection template |
| References | |
references/ICON-COMPATIBILITY.md | Icon validation reference (255/264 validated) |
references/DIAGRAM-BEST-PRACTICES.md | Visual design and layout guidelines |
references/xml-parser-guide.md | Detailed XML parsing reference |
references/xml-examples.md | Copy-paste XML examples |
references/coordinate-system.md | Positioning and layout guide |
references/style-guide.md | Style string reference |
| Scripts | |
scripts/validate-drawio.py | Validate .drawio XML structure |
scripts/validate-aws-icons.py | Validate AWS icon compatibility |
scripts/fix-aws-icons.py | Auto-fix icon shape names |
scripts/fix-drawio-icons.py | Bulk fix icon references in .drawio files |
scripts/extract-shape-names.py | Extract available shapes from DrawIO stencil |
scripts/analyze-existing.py | Extract shapes/connections from .drawio files |
scripts/export-diagram.sh | Export to PNG/PDF via DrawIO Desktop CLI |
scripts/open-diagram.sh | Open .drawio file in DrawIO Desktop |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.