Mindmap
ReviewAudited by ClawScan on May 10, 2026.
Overview
This skill looks like a simple local text-log tool rather than the advertised mind-map visualizer, and its remove command does not actually delete stored entries.
Review this carefully before installing. It does not appear to exfiltrate data or request credentials, but it is not a real mind-map visualizer based on the provided code. Treat it as a simple local plaintext log, do not store sensitive information, and do not rely on its remove command for deletion.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user expecting a mind-map tool may instead get a simple local logging utility with no evident branching or visualization features.
The same artifact advertises mind-map visualization and branching but then describes a generic text-entry log. The included script likewise only implements plain log operations, so the advertised capability is materially misleading.
description: "Create and visualize mind maps in the terminal with branching and export." ... "Multi-purpose utility tool for managing structured data entries. Add, list, search, remove, and export data items"
Install only if you want a simple local text log. The maintainer should either implement the promised mind-map features or update the name and description to match the actual behavior.
Information you believe you removed may remain in the local data file.
The remove command does not modify `data.log`; it only prints and logs a removal message. This conflicts with the documented remove/list workflow and means stored user entries persist.
cmd_remove() {
echo " Removed: $1"
_log "remove" "${1:-}"
}Do not rely on `mindmap remove` to delete sensitive entries. Manually inspect or delete the data files, and the maintainer should implement real deletion or clearly document that removal is only an audit log event.
Your notes, brainstorming items, and some command activity may remain on disk in the configured data directory.
The skill intentionally stores user-provided entries and command history locally in plain text. This is disclosed and purpose-aligned for a note/log utility, but it is persistent user data.
**Location:** `~/.local/share/mindmap/` ... **Data log:** `data.log` ... **History:** `history.log` — every command execution is recorded with a timestamp for auditing
Avoid storing secrets or highly sensitive information, or set `MINDMAP_DIR` to a location you can manage and delete when needed.
The skill may not work as documented without additional manual setup, and users cannot verify an installer from the provided artifacts.
The package includes a runnable shell script and documentation for a `mindmap` command, but no install specification is provided to show how that command is installed or invoked.
No install spec — this is an instruction-only skill. ... Code file presence: scripts/script.sh
Verify how the `mindmap` command is created before use. The maintainer should add a clear install spec or adjust the documentation for manual execution.