Use when creating a draw.io diagram for responsibility assignments across GRC, security, engineering, legal, HR, procurement, vendors, and auditors in a GRC, security, audit, compliance, privacy, cloud, or risk context.
NewMaintained
Automatic
◆Security & AppSec pack
Last verified 8/23/2026
What it changes
Passed 4 of 22 test cases with the skill, and 18 of 22 without it.
Without skill82%
With skill18%
Checks it passed that the model alone missed
Validated evidence and approved control steps use green styling.
The suggested filename uses descriptive lowercase hyphenated formatting ending in .drawio.
2 fixed9 passed either way3 still failing8 broke
Pass-rate lift
-64 pp
Tokens
+32%
Agent turns
0%
Response time
+27%
Model gemini-3.6-flashMeasured 8/23/2026v111 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 2
Prompt
Generate the draw.io RACI chart XML for our annual SOC 2 Type II audit readiness review. What file name should be suggested for saving this diagram artifact?
What was checked, without and with the skill
Checked
Without skill
With skill
The suggested filename uses descriptive lowercase hyphenated formatting ending in .drawio.
Missed
Passed
case-12 · gemini-3.6-flash · 8/23/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md59 linessingle file
GRC RACI diagram
Use this skill to structure the GRC content and visual pattern for responsibility assignments across GRC, security, engineering, legal, HR, procurement, vendors, and auditors. Then use the drawio skill to generate the native editable .drawio file and optional PNG/SVG/PDF export.
Common Requests
access review RACI
incident response compliance RACI
vendor review RACI
policy lifecycle RACI
Recommended Elements
Include these when relevant:
responsible
accountable
consulted
informed roles
controls
cadence
artifacts
approvals
Recommended Output Pattern
Produce a RACI matrix, swimlane responsibility flow, or ownership map. Choose a layout that matches the audience:
Executive: compact lifecycle/capability view with business impact labels.
Auditor/assessor: explicit evidence, owner, control, cadence, and scope labels.
Practitioner/engineering: operational systems, data paths, automation, failure/exception paths, and implementation detail.
draw.io Instructions
Load and follow the drawio skill.
Generate native mxGraphModel XML directly. Do not generate Mermaid as the final artifact.
Use descriptive lowercase hyphenated filenames.
Include a legend when colors, edge styles, or containers have compliance meaning.
Validate XML well-formedness before finalizing.
If PNG/SVG/PDF is requested, export with embedded diagram XML when the draw.io CLI is available.