Mindchart

PassAudited by ClawScan on May 1, 2026.

Overview

Mindchart appears to be a purpose-aligned infographic generation skill, with only ordinary local rendering and dependency-installation considerations.

This skill looks reasonable for creating infographics. Before installing, make sure you are comfortable installing the listed Node/Bun dependencies and run the conversion scripts only on files and output paths you intend to use.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The user may need to install third-party packages manually, so dependency source and version choice affect local security and reliability.

Why it was flagged

The skill relies on external Node/Bun packages for rendering, but no pinned package versions or install specification are provided in the registry metadata.

Skill content
requirements: Requires node or bun environment, install the following dependencies:@antv/infographic, opentype.js, sharp
Recommendation

Install dependencies from trusted package registries, prefer pinned versions in a project-local environment, and avoid running unrelated install commands.

What this means

If used with the wrong paths, the skill could read unintended local files or overwrite an output file accessible to the current user.

Why it was flagged

The helper script reads a user-specified infographic syntax file and writes a rendered SVG output, which is expected for this rendering skill but still grants local file read/write capability for selected paths.

Skill content
const content = fs.readFileSync(filePath, 'utf-8'); ... fs.writeFileSync(outputPath, svg);
Recommendation

Use dedicated working folders, review input and output paths before running conversions, and avoid pointing the scripts at sensitive files or important existing outputs.