ClawHub

Math & Statistics Graphing Engine

v1.0.0

Math & statistics graphing, computation, visualization and validation engine

⭐ 0· 328·1 current·1 all-time
byLyncius@architectds
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the behavior in SKILL.md: the skill provides plotting, statistics, and interactive graphs and declares a single MCP server (mathtalking.com) to perform those tasks. No unrelated environment variables, binaries, or install steps are requested.
ℹ
Instruction Scope
The instructions are scoped to plotting and statistical operations. They require sending graph/data to the declared MCP endpoint and always returning an interactive URL. The SKILL.md does not instruct reading unrelated local files or secrets, but it does direct the agent to transmit user-provided data to the external service for computation and rendering.
✓
Install Mechanism
Instruction-only skill with no install spec or code files; nothing is written to disk by the skill itself. This is a low-risk installation model.
✓
Credentials
No environment variables, credentials, or config paths are requested. The declared primary endpoint aligns with the stated purpose; there are no disproportionate secret requests.
✓
Persistence & Privilege
always is false and the skill is user-invocable (normal). It can be invoked autonomously by the agent by default, which is expected and not by itself a concern. The skill does not request to modify other skills or system-wide config.
Assessment
This skill delegates computation and rendering to https://mathtalking.com/api/mcp and will send any graph data you provide to that remote service; using it is coherent for plotting but may expose sensitive data. Before installing or using the skill, verify you trust mathtalking.com (review its privacy/security policies), avoid sending secrets or regulated data in graphs, and prefer local/offline alternatives for sensitive datasets. Note that no local code was provided for review (instruction-only), so the static scanner had nothing to analyze — the main risk is data sent to the external server.

Like a lobster shell, security has layers — review code before you run it.

latestvk970bp4d927vs1j45aa0jvcq0x83e25v

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments