Mindgraph

PassAudited by ClawScan on May 10, 2026.

Overview

Mindgraph is a local workspace knowledge-graph skill with no network or credential behavior shown, but it does persistently index workspace Markdown files and encourages always-on wikilink usage.

Mindgraph appears safe for local knowledge-graph use if you are comfortable with it indexing all workspace Markdown files and making wikilinks a default writing style. Review saved MindSkills before reusing them, and avoid using it in workspaces that contain Markdown notes you do not want included in a persistent local graph.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Markdown filenames, aliases, and wikilink relationships from the workspace are stored locally in mindgraph.json and may be reused in later queries.

Why it was flagged

The script indexes all Markdown files under the workspace, creating a persistent graph from workspace content.

Skill content
for root, dirs, fnames in os.walk(WORKSPACE): ... if f.endswith('.md'): files.append(os.path.join(root, f))
Recommendation

Use it in workspaces where broad Markdown indexing is acceptable, and avoid placing sensitive private notes in indexed Markdown files unless you want them included.

What this means

A saved MindSkill can affect future agent behavior when similar requests are made.

Why it was flagged

The skill stores learned repeatable processes as files that the agent later reads and follows, which is intentional but creates persistent task guidance.

Skill content
Learning a New MindSkill ... Then write the PROCESS.md based on the user's description.
Recommendation

Review learned MindSkill PROCESS.md files before reusing them, especially if they were created from untrusted or experimental instructions.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

Markdown files the agent edits may be automatically written with Obsidian-style wikilinks even when the user did not specifically ask for graph formatting.

Why it was flagged

The skill broadly changes how the agent should write Markdown files. This is consistent with the skill’s purpose, but it applies beyond explicit graph-query tasks.

Skill content
Every time you write or edit a markdown file, use `[[wikilinks]]` ... This is not optional.
Recommendation

Install only if you want wikilinks to become a default writing convention for workspace Markdown.

What this means

The skill may fail or behave differently if Python is unavailable, and the runtime requirement is not reflected in metadata.

Why it was flagged

The documentation expects a Python runtime and bundled script execution, while the registry requirements declare no required binaries.

Skill content
python3 skills/mindgraph/scripts/mindgraph.py index
Recommendation

Confirm Python 3 is available and review the bundled script before relying on the commands.