Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Mindgraph
v1.0.0Create and query an Obsidian-style [[wikilink]] knowledge graph with learnable repeatable MindSkills for managing and analyzing workspace files.
⭐ 0· 463·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (wikilinks + MindSkills) match the included SKILL.md and scripts: the Python script indexes .md files, resolves [[wikilinks]], and stores mindskill results under skills/mindgraph/mindskills/. No unrelated binaries, cloud credentials, or surprising resources are required.
Instruction Scope
SKILL.md explicitly instructs the agent to read workspace markdown files and to create/write MindSkill result files and the graph index (mindgraph.json). That behavior is consistent with the purpose, but the 'Always-On Rules' (use [[wikilinks]] for every markdown file you write) is a broad stylistic mandate that could affect many files and authoring workflows — review whether you want the agent to edit or standardize existing workspace files.
Install Mechanism
No install spec; this is an instruction-only skill that bundles a plain Python script. Nothing is downloaded from external URLs and there are no package-install steps in the manifest.
Credentials
No credentials or special environment variables are required. The script supports an optional MINDGRAPH_WORKSPACE env var to override the workspace root — this is reasonable and proportional.
Persistence & Privilege
always:false (normal). The skill does create persistent artifacts in the workspace (mindgraph.json, mindskill directories/results). That's expected for a knowledge-graph skill, but be aware these files are written into your workspace and persist across sessions.
Assessment
This skill appears to do what it says: it will scan all .md files in the workspace, write a mindgraph.json index in the workspace root, and create mindskill folders/results under skills/mindgraph/. It does not require credentials or contact external services. Before installing, consider: (1) If your workspace includes sensitive content in markdown, the index will read it — move or exclude sensitive files if needed. (2) The skill will persistently write mindgraph.json and result files; back up any existing files with the same names. (3) The SKILL.md enforces a broad authoring rule (always use [[wikilinks]]), which may change how the agent edits or writes notes — decide whether you want that convention applied automatically. (4) If you enable autonomous agent invocation, remember it could create/modify files when asked; consider limiting write actions to manual approval if you want stricter control.Like a lobster shell, security has layers — review code before you run it.
latestvk97fv5j85ewcjvnvembaq32yvd81szx2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.