Diagram Cog

v1.0.5

AI diagram generation powered by CellCog. Flowcharts, system architecture, mind maps, org charts, ER diagrams, sequence diagrams, Gantt charts, network diagr...

0· 158·1 current·1 all-time
byCellCog@nitishgargiitd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchasesRequires OAuth tokenRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the runtime instructions: the skill calls the CellCog service (SDK usage shown) to generate interactive diagrams. Required python3 and a CELLCOG_API_KEY are reasonable for a Python SDK-based integration.
Instruction Scope
SKILL.md instructs the agent to send prompts to CellCog via client.create_chat and states the service may generate code and deploy interactive web apps. The instructions do not ask the agent to read unrelated local files or other environment variables, but they do imply uploading diagram content (and possibly generated code) to an external host — consider privacy/PII implications.
Install Mechanism
This is instruction-only (no install spec). Metadata lists a dependency 'cellcog' but provides no install steps — the environment must already have the CellCog SDK available (and python3). That mismatch is benign but worth noting: the skill assumes the SDK is installed at runtime without describing how.
Credentials
Only CELLCOG_API_KEY is required. That single API key is proportional to calling an external diagram service; no unrelated credentials or config paths are requested.
Persistence & Privilege
The skill does not request always:true and uses normal agent invocation. It does not ask to modify other skills or system-wide settings. No elevated persistence is requested.
Scan Findings in Context
[no-findings] expected: The repository contains no code files; the regex scanner had nothing to analyze. For an instruction-only SDK wrapper this is expected, but it also means there is nothing local to audit.
Assessment
This skill delegates diagram generation to cellcog.ai and requires your CELLCOG_API_KEY — anything you send (descriptions, uploaded files, or generated code) will go to that external service. Before installing: 1) Confirm you trust CellCog and review their privacy/retention policy; 2) Use a scoped or dedicated API key (not long-lived org-wide secrets) and monitor billing; 3) Avoid sending passwords, private keys, or sensitive production configuration in prompts; 4) Ensure the CellCog SDK (or pip package) is installed in your environment since the skill provides no install steps; and 5) If you need stronger guarantees about confidentiality, contact the vendor about data retention or on-prem options.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d8rda15c3s4tt9k635c1xvx84t12w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🔀 Clawdis
OSmacOS · Linux · Windows
Binspython3
EnvCELLCOG_API_KEY

Comments