react-jsmind-usage
PassAudited by VirusTotal on May 7, 2026.
Overview
Type: OpenClaw Skill Name: react-jsmind-usage Version: 1.0.0 The skill bundle provides legitimate documentation and integration examples for the '@frank17008/react-jsmind' npm package. The SKILL.md file contains standard React code snippets, type definitions, and troubleshooting tips without any evidence of malicious intent, data exfiltration, or prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Adding an npm dependency brings third-party code into the user's React project and build process.
The skill tells users how to install a third-party npm package. This is clearly disclosed and central to the React integration purpose, but users should still review the package provenance and version before installing.
npm install @frank17008/react-jsmind # or yarn add @frank17008/react-jsmind
Install only in the intended project, review the npm package and maintainer information, and use a lockfile or pinned version where appropriate.