Mind Map
v1.0.2Generate a PNG mind map from Markdown using free (auto), center, or horizontal layout. Use when user asks to produce a brain map/思维导图 from notes.
⭐ 1· 99·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description align with included code: scripts parse Markdown and render PNG images using Pillow. Declared runtime artifacts (examples, reference, runner) match the functionality. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions stay within the stated purpose (read Markdown input, optionally from a file, generate image(s), save outputs and report stats). Two minor issues: SKILL.md includes a hardcoded Windows-oriented working directory example ('D:\Work\skills\mind_map') and there are inconsistent path/name conventions in docs (uses both mind_map and mind-map-skill), which are usability inconsistencies but not security-critical. Also note the runner will read any file path you pass and will save the input Markdown into the output folder (so do not pass sensitive files you do not want duplicated into output).
Install Mechanism
This is instruction/code bundle with no automated install spec. Dependencies are minimal (Pillow listed in requirements.txt). The only network activity is an on-demand font download from a GitHub raw URL (FONT_DOWNLOAD_URL) to a local cache; using raw.githubusercontent.com is common for assets but still an external network fetch. There is no download-from-arbitrary-URL installer or obfuscated fetches.
Credentials
The skill requests no environment variables or credentials. The only filesystem writes are to the output directory and to a per-user cache (~/.cache/mind-map-skill/chinese_font.ttc) for an optional font — this is proportionate to its purpose.
Persistence & Privilege
always is false and disable-model-invocation is true (so it will not be autonomously invoked). The skill writes only to its own output and cache paths and does not alter other skills or system-wide agent settings.
Assessment
This skill is coherent and appears safe for typical use: it parses Markdown and renders PNGs locally. Before installing or running, note: (1) you need Pillow installed (requirements.txt lists pillow>=10); (2) on first run it will try to download a CJK font from raw.githubusercontent.com and cache it at ~/.cache/mind-map-skill/chinese_font.ttc — if you prefer no network fetch, either provide a local CJK font or run offline; (3) the runner will read any file path you pass and will save the input Markdown into the output folder, so avoid pointing it at sensitive files you don't want duplicated; (4) SKILL.md contains inconsistent example paths (Windows path and different directory names) — ensure you call the correct script path for your environment. If you need higher assurance, review the bundled Python files locally (they are small and readable) and run the tool in an isolated environment (container or VM).Like a lobster shell, security has layers — review code before you run it.
latestvk97ft97vsmktza5ecqyf5p93fx83wpfm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.