ClawHub

React Flow

v1.1.0

React Flow (@xyflow/react) for workflow visualization with custom nodes and edges. Use when building graph visualizations, creating custom workflow nodes, im...

⭐ 0· 93·1 current·1 all-time
byKevin Anderson@anderskev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name, description, and SKILL.md all describe creating node/edge visualizations with @xyflow/react. The examples, hooks, and custom node/edge patterns match that purpose. No unrelated capabilities (cloud access, system administration, etc.) are requested. Note: the skill references installing @xyflow/react but the package's source/homepage are listed as unknown/none in the registry metadata — that is outside the skill itself but worth verifying before installing the package.
✓
Instruction Scope
SKILL.md and the reference files are code examples and usage guidance for React Flow APIs and event hooks. They do not instruct the agent to read arbitrary files, access credentials, call external endpoints, or exfiltrate data. The only persistent storage mention is an optional localStorage save/restore pattern for viewport state, which is appropriate for UI state persistence.
✓
Install Mechanism
There is no install specification included (instruction-only). The Quick Start shows a typical 'pnpm add @xyflow/react' example rather than an automated download or custom installer. No downloads from arbitrary URLs or archive extraction are specified.
✓
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportional for a front-end UI library documentation skill.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or system-wide configuration. There is no instruction to modify other skills or system agent settings.
Scan Findings in Context
[no_code_files_for_regex_scan] expected: The static regex scanner had no code files to analyze beyond documentation examples; that is expected for an instruction-only skill. This means there were no automated pattern matches to surface, not that the package itself is verified.
Assessment
This skill is documentation for using a React Flow library and appears internally consistent. Before you follow the installation example, verify the upstream package (@xyflow/react) on the package registry (npm/pnpm) because the registry metadata here shows 'source: unknown' and no homepage — confirm the package name, maintainer, license, and integrity (signatures/checksums) to avoid installing a malicious or spoofed package. Otherwise, the skill itself does not request credentials or perform hidden actions.

Like a lobster shell, security has layers — review code before you run it.

latestvk97aezgy0gw8tpcqy39b1nr2th83q3gm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments