Borrowing it
Nothing to install: this file belongs to ZimoLiao/scholaraio. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/ZimoLiao/scholaraio/main/.claude/skills/draw/SKILL.mdgit clone --depth 1 https://github.com/ZimoLiao/scholaraioWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zimoliao/scholaraio/draw)<a href="https://agentmods.dev/skills/zimoliao/scholaraio/draw"><img src="https://agentmods.dev/badge/skills/zimoliao/scholaraio/draw/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zimoliao/scholaraio/draw"><img src="https://agentmods.dev/badge/skills/zimoliao/scholaraio/draw.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Privilege Escalation · line 98 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.01956 |
| Opus 5.5 | $0.00017 | $0.00782 |
| Sonnet 5.5 | $0.00008 | $0.00391 |
| Haiku 4.5 | $0.00004 | $0.00196 |
Grade B, and why
draw scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
sudo apt-get install graphviz inkscape How it starts
The opening of the file, as written. The whole thing — 179 lines — stays where its author put it; the contents beside it link to each section on GitHub.
绘图工具(Text → IR → Diagram)
Capability Routing
当前 Agent 原生能力优先,但必须先做能力检查:按所需输出格式和可复现性路由,不按 Agent 品牌路由。若当前会话实际提供 Mermaid、DOT、SVG 或图片生成能力,就由当前使用的 Agent 原生能力完成普通流程图、架构图、关系图和演示示意图。只有需要从 ScholarAIO 论文库提取结构、保存 IR、批量复现或生成可继续编辑的 drawio 文件时,才调用 scholaraio diagram。不要为普通绘图安装额外 Python 绘图库。
draw skill 的核心工作流是两步式:先将文字描述或论文内容转换为统一的中间表示(IR),再将 IR 渲染为多种可编辑格式。
后端选择速查表
| 需求 | 推荐后端 | 输出格式 | 特点 |
|---|---|---|---|
| 快速画流程图/架构图,零依赖预览 | Mermaid | .mermaid / 嵌入 Markdown |
文本即代码,常见 Markdown 宿主可直接渲染 |
| 论文插图,LaTeX Beamer 直插 | Graphviz SVG | .svg + .dot 源码 |
矢量图,可版本控制,<?xml> 级精确 |
| 在线协作/精调布局 | drawio | .drawio XML |
导入 diagrams.net 后手动拖拽调整 |
| 自定义实验示意图、信息图 | 当前 Agent 直接生成 SVG/图片 | .svg / .png |
普通场景零新增 Python 依赖 |
| 程序化批处理、版本控制 | Graphviz DOT | .dot |
纯文本,Diff 友好,任何平台可编译 |
工作流架构
┌─────────────┐ extract_diagram_ir() ┌────────────┐
│ 文字描述 │ ────────────────────────────> │ IR │
│ 或论文全文 │ │ {nodes, │
└─────────────┘ │ edges, │
│ layout} │
└─────┬──────┘
│ render_ir(fmt)
┌─────────────────────────────────────┼─────────────────────────────────────┐
▼ ▼ ▼
┌──────────┐ ┌──────────┐ ┌──────────┐
│ Mermaid │ │ SVG │ │ drawio │
│ flowchart│ │ (Graphviz│ │ XML │
└──────────┘ └──────────┘ └──────────┘
- IR(Intermediate Representation):标准化 JSON,包含
title、nodes[]、edges[]、layout_hint - 提取:可由 LLM 从论文 Method/Architecture 章节自动提取,也可由用户直接提供文字描述后调用 LLM 生成 IR
- 渲染:通过
render_ir(ir, fmt)分发到注册的后端,完全解耦
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 179 lines · 42 tokens per session scan B 630d9d886ab7
draw is a skill published in the GitHub repository ZimoLiao/scholaraio (584 stars, last pushed 10d ago), licensed MIT. It adds 42 tokens to every session and 1,956 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
draw compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| drawZimoLiao/scholaraio | Skill | 584 | 10d ago | MIT | B | 42 | Claude Code |
| Data Visualization Librarydocxology/template | Skill | 23 | yesterday | Apache-2.0 | A | 16 | Claude Code, Codex |
| ux-journey-architectsergekostenchuk/seo-llm-skill-cluster | Skill | 40 | 4mo ago | MIT | A | 84 | Codex |
| ui-motion-workflowpowehi-eu/ui-motion-workflow | Skill | 6 | 3mo ago | MIT | A | 111 | Codex |
| webgl-holographic-foilnexu-io/open-design | Skill | 106k | yesterday | Apache-2.0 | A | 41 | Claude Code, Codex |
| html-ppt-hermes-cyber-terminalnexu-io/open-design | Skill | 106k | yesterday | Apache-2.0 | A | 53 | Claude Code, Codex |
| visual-ralphYeachan-Heo/oh-my-codex | Skill | 34k | 4d ago | MIT | A | 52 | Codex |