All skills & plugins / Awesome Copilot plugins (GitHub)

draw

Draw simple diagrams in a Copilot canvas: shapes, arrows that stay attached, text and a freehand pen. Copilot can read, create and edit the same drawing, tidy its layout, and export it as PNG or SVG.

Pre-approved tools

No allowed-tools or tools list in its SKILL.md, command or agent files, so the agent asks before using tools as usual.

Hooks

No hooks.

MCP servers and apps

None.

Bundled code

27 code files (JavaScript):

• extensions/draw/settings.mjs
• extensions/draw/extension.mjs
• extensions/draw/store.test.mjs
• extensions/draw/actions.test.mjs
• extensions/draw/server.mjs
• extensions/draw/server.test.mjs
• extensions/draw/store.mjs
• extensions/draw/actions.mjs
• draw/public/menus.js
• draw/public/app.js
• draw/public/sync.js
• draw/public/editor.js
• draw/public/theme.js
• draw/public/icons.js
• draw/public/ui.js
• and 12 more

Network calls

1 file with a network call pattern. First match per file:

• extensions/draw/public/sync.js:61

  const res = await fetch(this.url(route), {

Starts other programs

4 files. First match per file:

• extensions/draw/server.mjs:7

  import { spawn } from "node:child_process";

• extensions/draw/server.test.mjs:93

  const type = /^event: (.*)$/m.exec(block)?.[1];

• extensions/draw/public/editor.js:604

  const m = /width="(\d+)" height="(\d+)"/.exec(svg);

• extensions/draw/lib/model.mjs:328

  const m = /^#?([0-9a-f]{6})$/i.exec(String(hex).trim());

Credentials referenced

No key, token or secret environment variable found in code or MCP config.

Static scan of commit d75b418 on 2026-10-27. Signals are patterns found in the files, not a verdict: a network call can be the whole point of a skill. Read the linked lines before you decide. How the scan works.