PM Toolkit - Excalidraw - "Messy Thoughts" to "Visual Spec" in 30 seconds.
v1.0.0Visualizes Product Manager thoughts (Why, What, How, User Journey) into an editable Excalidraw diagram. Use when the user asks to "visualize specs", "create a PM diagram", or "map out product thoughts".
⭐ 4· 3.2k·14 current·16 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (convert PM thoughts to Excalidraw) matches the included script and instructions. The Python script reads a JSON spec and writes an .excalidraw file; nothing in the manifest or code indicates unrelated capabilities (no cloud APIs, no extra binaries).
Instruction Scope
Instructions ask the agent/user to create a temporary JSON, run the local Python script, create an output directory, and delete the temp file. This stays within the stated purpose (local generation of diagrams). One minor incoherence: SKILL.md runs python3 skills/pm-visualizer/scripts/layout_diagram.py but the package manifest lists scripts/layout_diagram.py — path differences may cause a runtime path error if the agent's working directory differs. Also note the script writes files to user-specified paths (e.g., ~/Downloads/Documents/PM_Visuals).
Install Mechanism
No install spec or remote downloads included. The skill is instruction-only with a bundled Python script; nothing is fetched from external URLs.
Credentials
The skill requests no environment variables, credentials, or config paths. The code reads only the provided input JSON and writes a local .excalidraw file — credential access is not required or requested.
Persistence & Privilege
always:false and user-invocable:true (defaults) — the skill does not demand permanent inclusion or elevated privileges. It performs local file operations only and does not modify other skills or global agent configuration.
Assessment
This skill appears to do what it says: it takes a JSON spec and produces an .excalidraw file locally. Before installing/using it: (1) verify you have Python 3 available (the script runs locally); (2) inspect scripts/layout_diagram.py (it is included) if you want to be certain it contains only expected local file operations — there are no network calls or secret accesses; (3) check the SKILL.md command path (skills/pm-visualizer/scripts/... vs scripts/...) and adjust the invocation to match where the script actually lives; (4) run the script in a directory where writing files is acceptable (it will create output files and you are asked to create output directories); and (5) if you allow autonomous agent invocation, be aware the agent could run the script and write files on your behalf — this is normal but make sure you trust the skill source. Overall the package is coherent and proportional to its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk973jywv0fztf8cgqmfvb0bf618085jq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.