Baoyu Infographic

This skill appears internally consistent and low-risk as an instruction-only infographic generator, but take these practical precautions before using it: - Do not include secrets (API keys, passwords, tokens) in the content you pass to the skill. Although the SKILL.md instructs the generator to strip credentials before output, relying solely on that is brittle. Remove sensitive values manually beforehand. - Expect the skill to read project and user preference files (e.g., .baoyu-skills/baoyu-infographic/EXTEND.md, ${XDG_CONFIG_HOME:-$HOME/.config}), and to write outputs into a local folder infographic/{topic-slug}/. If you’re concerned about filesystem access, run it in a sandboxed/isolated workspace. - Verify output paths and overwrite behavior so files aren’t unexpectedly replaced. - Review the referenced GitHub homepage/source before wide deployment if you want provenance assurance (homepage: https://github.com/JimLiu/baoyu-skills#baoyu-infographic). - If you need stricter guarantees about not exfiltrating data, restrict the agent's file- and network-access policies or run the skill locally with inspection of generated files. Confidence is high that the package is coherent with its stated purpose; the primary risk is accidental inclusion of sensitive data in inputs rather than covert or malicious behavior in the skill itself.