react-jsmind-usage
AdvisoryAudited by Static analysis on May 7, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
Adding an npm dependency brings third-party code into the user's React project and build process.
Why it was flagged
The skill tells users how to install a third-party npm package. This is clearly disclosed and central to the React integration purpose, but users should still review the package provenance and version before installing.
Skill content
npm install @frank17008/react-jsmind # or yarn add @frank17008/react-jsmind
Recommendation
Install only in the intended project, review the npm package and maintainer information, and use a lockfile or pinned version where appropriate.