Chart Generator Zc
v1.0.0Data visualization tool producing SVG charts. Use when you need bar charts, line charts, pie charts, tables, sparklines, gauges,.
⭐ 0· 98·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description promise SVG/ASCII charts and the provided scripts (scripts/chart.sh and scripts/script.sh) implement exactly that: ASCII charts, SVG/HTML exports, CSV import, and a history log. The tool requests no external credentials and no unexpected binaries.
Instruction Scope
SKILL.md instructs running scripts/chart.sh and describes the data formats. The runtime scripts create files (SVG/HTML) and a history log, read CSV files when asked, and respect CHART_DIR/XDG_DATA_HOME/HOME for storage. They do not call external network endpoints. This is within scope, but be aware the skill writes to the user's filesystem and reads CSV files you point it to.
Install Mechanism
No install spec — instruction-only with bundled scripts. No remote downloads or installers; lowest-risk install model.
Credentials
No required environment variables or credentials are declared. Scripts optionally honor CHART_DIR and XDG_DATA_HOME (common location vars) and use HOME for defaults. These are proportionate to a file-writing chart tool.
Persistence & Privilege
The skill is not always-enabled and can be invoked by the user. It creates a data directory (defaults to $XDG_DATA_HOME or $HOME/.local/share/chart-generator) and appends to a history.log — expected for this app but worth noting if you want to avoid persistent files.
Assessment
This skill appears to do what it says: generate ASCII and SVG/HTML charts locally. Before installing or running it: (1) expect it to create files (SVGs, HTML, and a history.log) under $CHART_DIR or $XDG_DATA_HOME (defaults to ~/.local/share/chart-generator); (2) it accepts CSV file paths you provide — only give it non-sensitive CSVs unless you trust the code; (3) there are minor metadata/version mismatches in the bundle (registry vs _meta.json vs SKILL.md) and a few sloppy shell idioms, so you may want to run it in a sandbox/container or review the scripts yourself; (4) if you need networked or credentialed behavior, this skill does not provide it. If you want extra caution, run chart commands on test data and inspect created files before using on production data.Like a lobster shell, security has layers — review code before you run it.
latestvk97dqywyz640vejp1rg60gjjj983me4v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
