svg-generator-pro
v1.0.0Generate customizable SVG backgrounds and graphics with multiple styles (tech, minimal, geometric, abstract) and color schemes. Use when creating website bac...
⭐ 0· 296·0 current·0 all-time
byNima Chu@nimachu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, README.md and included scripts all match: generating SVGs, PPT backgrounds, and converting to PNG. Minor usability note: SKILL.md shows CLI names (svg-generator, svg-to-png, ppt-image-generator) but there is no install spec or package.json that would expose these commands on PATH — the provided scripts are present but the skill doesn't declare how they get installed or invoked as global CLIs.
Instruction Scope
Runtime instructions only call local generation and conversion commands, reference only local files and outputs, and do not instruct reading unrelated files, environment variables, or sending data externally. The scripts perform file reads/writes and canvas rendering consistent with the described functionality.
Install Mechanism
There is no install spec (lowest risk) and all code is included in the bundle — no remote downloads. One minor coherence issue: the scripts require the 'canvas' module (require('canvas')) and Node.js, but the manifest/README/SKILL.md only lists Node.js generically and does not include dependency installation instructions or a package.json. This is a functional/usability gap rather than a security concern.
Credentials
The skill requests no environment variables, no credentials, and the code does not access environment or secret files. File-system access is limited to writing generated outputs (creating output directories as needed).
Persistence & Privilege
The skill is not force-included (always:false), does not request persistent system-wide changes, and does not modify other skills or system-wide agent configuration. It runs locally and only writes its own output files.
Assessment
This skill appears coherent and focused on local SVG/PNG generation. Before installing or running it: 1) Verify you have Node.js and install the required Node dependencies (the scripts use the 'canvas' package which often requires native libs). The bundle does not include a package.json or install steps, so you may need to run npm init / npm install canvas (and any other deps) or run the scripts directly with node. 2) Inspect the scripts yourself (they are included) and run them in a safe environment or sandbox if you are unsure. 3) Note that the CLI names shown in SKILL.md are convenience examples — the skill does not provide an automatic installer to put those commands on your PATH. 4) Because the scripts write files, ensure you run them where you expect their output to go and with appropriate filesystem permissions. If you need the skill to run autonomously, confirm how your agent will invoke Node and whether dependencies will be available; otherwise, use manually after installing dependencies.Like a lobster shell, security has layers — review code before you run it.
latestvk975sevrnapcfvg20gn7yb5ha182vpw1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
