drawio

drawio is a skill for Claude Code, Codex from jgraph/drawio-mcp. It costs 160 tokens per session (6,436 once invoked), scanned A, original, Apache-2.0.

A tool for creating editable diagrams in draw.io, a diagram editor used for flowcharts, system designs, database relationships, and other technical drawings.

In plain words
What is it for?
It helps create flowcharts, architecture, ER, sequence, class, network, mockup, and wireframe diagrams, with exports to PNG, SVG, or PDF.
Why use it?
It provides a structured diagram file that can be reopened and edited instead of producing only a fixed image.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: positional $N argument; mentions Claude Code; mentions Codex.

Good fit It helps create flowcharts, architecture, ER, sequence, class, network, mockup, and wireframe diagrams, with exports to PNG, SVG, or PDF.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/jgraph/drawio-mcp/drawio
About the project

drawio-mcp is an official Model Context Protocol server that lets AI assistants create and open editable diagrams in the draw.io editor. It supports diagram workflows ranging from inline chat previews to browser editing and generated draw.io, PNG, SVG, or PDF files. The catalogue entries provide its MCP servers, assistant integrations, project instructions, and skill.

jgraph/drawio-mcp · 5,779 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add jgraph/drawio-mcp --skill drawio
Clone the repo
git clone --depth 1 https://github.com/jgraph/drawio-mcp

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for drawio

README.md
[![agentmods](https://agentmods.dev/badge/skills/jgraph/drawio-mcp/drawio/github.svg)](https://agentmods.dev/skills/jgraph/drawio-mcp/drawio)
Your own site
<a href="https://agentmods.dev/skills/jgraph/drawio-mcp/drawio"><img src="https://agentmods.dev/badge/skills/jgraph/drawio-mcp/drawio/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for drawio

Your own site · 80×15
<a href="https://agentmods.dev/skills/jgraph/drawio-mcp/drawio"><img src="https://agentmods.dev/badge/skills/jgraph/drawio-mcp/drawio.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 160 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,436 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Socket pass 20 Oct 2026
  • Snyk warn 20 Oct 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00160 $0.06436
Opus 5.5 $0.00064 $0.02574
Sonnet 5.5 $0.00032 $0.01287
Haiku 4.5 $0.00016 $0.00644

Measured 10d ago against content hash 78a7a57cb7dd, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

drawio scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/find-shapes.js), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/antigravity/skills/drawio/SKILL.md · 400 lines

How it starts

The opening of the file, as written. The whole thing — 400 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Draw.io Diagram Skill

Generate draw.io diagrams as native .drawio files. Author each diagram either as Mermaid (concise text that the draw.io desktop CLI converts and lays out for you) or as draw.io XML directly. Optionally auto-layout XML-authored diagrams with ELK, export to PNG/SVG/PDF with the diagram XML embedded (so the exported file stays editable in draw.io), or generate a browser URL that opens the diagram directly in the draw.io editor.

Inline viewer first. This skill writes files and opens them with a shell command. If the draw.io MCP server's create_diagram tool is available in a chat that shows diagrams inline (VS Code's or Cursor's own chat, Claude.ai, ChatGPT), and the user hasn't asked for a .drawio file, an export or a URL, call create_diagram instead: the diagram appears in the conversation, with no file and no shell command. Claude Code, Codex and Copilot CLI don't show diagrams inline, not even in their VS Code or JetBrains extensions: there create_diagram only returns a link, so use this skill.

Authoring: Mermaid or XML?

The desktop CLI converts Mermaid to a native .drawio file and lays it out automatically, which is far more reliable than hand-positioning cells in XML.

Author as Best for Needs desktop CLI?
Mermaid Flowcharts, sequence, class, state, ER, gantt, mindmap, timeline, user journey, quadrant, C4, git graph, pie, and other standard types Yes — to convert to .drawio
XML Custom styling, precise/hand positioning, specific shape libraries (AWS, Azure, network, UML detail…), or when the desktop CLI is not installed No (optional ELK --layout needs the CLI)
  • Prefer Mermaid when the desktop CLI is available and the request is one of the standard types above.
  • Use XML for precise control, or as the universal fallback: XML needs no CLI, so it's the only option when the desktop app isn't installed (deliver a .drawio file or a url). For XML you can let the CLI apply an ELK auto-layout instead of computing coordinates yourself.

Read the full file on GitHub · 400 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago Changed · +12 lines 78a7a57cb7dd
  2. 17d ago Changed · -87 lines · +160 tokens per session 60e1fd54b577
  3. 21d ago Changed 52211fe4a1a9
  4. 22d ago Changed · +10 lines · -75 tokens per session eca135567c86
  5. 23d ago Changed · +22 lines 1b9bd2bd291a
  6. 1mo ago Changed · +49 lines 5e1d5460fc6a
  7. 1mo ago Changed · +2 lines c1785b5784b3
  8. 1mo ago Changed · +2 lines 06920ebc1416
  9. 2mo ago First seen · 390 lines · 75 tokens per session scan A 4db0d9428e85

Subscribe to this mod's changes

drawio is a skill published in the GitHub repository jgraph/drawio-mcp (5,779 stars, last pushed yesterday), licensed Apache-2.0. It adds 160 tokens to every session and 6,436 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

drawio compared with skills from other repositories

drawio next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
drawiojgraph/drawio-mcpSkill5.8kyesterdayApache-2.0A160Claude Code, Codex
webgl-holographic-foilnexu-io/open-designSkill106ktodayApache-2.0A41Claude Code, Codex
html-ppt-hermes-cyber-terminalnexu-io/open-designSkill106ktodayApache-2.0A53Claude Code, Codex
html-ppt-taste-brutalistnexu-io/open-designSkill106ktodayApache-2.0A78Claude Code, Codex
visual-ralphYeachan-Heo/oh-my-codexSkill34k3d agoMITA52Codex
glance-canonical-layoutsandroid/skillsSkill10kyesterdayApache-2.0A56Claude Code
accessibilitymicrosoft/hve-coreSkill1.6ktodayMITA47Claude Code