Mindchart
PassAudited by ClawScan on May 1, 2026.
Overview
Mindchart appears to be a purpose-aligned infographic generation skill, with only ordinary local rendering and dependency-installation considerations.
This skill looks reasonable for creating infographics. Before installing, make sure you are comfortable installing the listed Node/Bun dependencies and run the conversion scripts only on files and output paths you intend to use.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The user may need to install third-party packages manually, so dependency source and version choice affect local security and reliability.
The skill relies on external Node/Bun packages for rendering, but no pinned package versions or install specification are provided in the registry metadata.
requirements: Requires node or bun environment, install the following dependencies:@antv/infographic, opentype.js, sharp
Install dependencies from trusted package registries, prefer pinned versions in a project-local environment, and avoid running unrelated install commands.
If used with the wrong paths, the skill could read unintended local files or overwrite an output file accessible to the current user.
The helper script reads a user-specified infographic syntax file and writes a rendered SVG output, which is expected for this rendering skill but still grants local file read/write capability for selected paths.
const content = fs.readFileSync(filePath, 'utf-8'); ... fs.writeFileSync(outputPath, svg);
Use dedicated working folders, review input and output paths before running conversions, and avoid pointing the scripts at sensitive files or important existing outputs.
