xmindify

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: xmindify Version: 1.0.0 The xmindify skill is a legitimate tool for generating XMind mind maps and SVG diagrams from structured text. It utilizes the 'xmindmark' CLI utility and provides several markdown templates for different use cases such as paper analysis, brainstorming, and project planning. The instructions in SKILL.md and the scenario files are well-defined, focus solely on the stated functionality, and show no evidence of malicious intent, data exfiltration, or unauthorized command execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing a global npm/pnpm package can change the user's local tool environment and runs code from the package ecosystem.

Why it was flagged

The skill depends on an external global CLI package, while the registry requirements list no required binaries and there is no install spec. The dependency is disclosed and purpose-aligned, but users should trust the package source before installing.

Skill content
compatibility: requires xmindmark CLI (install via pnpm install -g xmindmark)
Recommendation

Install xmindmark only from a trusted package source, consider pinning a known-good version, and verify the CLI before using the skill.

What this means

The agent may run a local conversion command if the user asks for XMind or SVG output.

Why it was flagged

The skill documents local CLI execution to convert generated mind-map files. This is expected for the stated conversion purpose and is limited to the named xmindmark command.

Skill content
xmindmark -f xmind topic.xmindmark
xmindmark -f svg topic.xmindmark
Recommendation

Confirm that the xmindmark CLI is installed intentionally and review output paths before conversion, especially when using the -o option.