xmindify

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill appears purpose-aligned for creating mind maps, but it relies on a user-installed external XMindMark CLI.

This skill is reasonable to install if you want mind-map generation. Before using export features, make sure you trust and intentionally installed the external xmindmark CLI, since the skill itself does not bundle or pin that dependency.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing a global npm/pnpm package can change the user's local tool environment and runs code from the package ecosystem.

Why it was flagged

The skill depends on an external global CLI package, while the registry requirements list no required binaries and there is no install spec. The dependency is disclosed and purpose-aligned, but users should trust the package source before installing.

Skill content
compatibility: requires xmindmark CLI (install via pnpm install -g xmindmark)
Recommendation

Install xmindmark only from a trusted package source, consider pinning a known-good version, and verify the CLI before using the skill.

What this means

The agent may run a local conversion command if the user asks for XMind or SVG output.

Why it was flagged

The skill documents local CLI execution to convert generated mind-map files. This is expected for the stated conversion purpose and is limited to the named xmindmark command.

Skill content
xmindmark -f xmind topic.xmindmark
xmindmark -f svg topic.xmindmark
Recommendation

Confirm that the xmindmark CLI is installed intentionally and review output paths before conversion, especially when using the -o option.