ClawHub

Chart AI

v1.0.0

Use this skill when the user wants to create visualizations (charts, dashboards, diagrams, Gantt, PPT), analyze data (Excel/CSV upload, cross-file analysis,...

⭐ 0· 65·0 current·0 all-time
byChartGen AI@chartgen-ai·duplicate of @chartgen-ai/chartai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (data visualization, analysis, PPT) match the included helper script and SKILL.md. The only required environment variable is CHARTGEN_API_KEY and the tool performs file uploads and API calls to produce charts, which is expected for this purpose.
✓
Instruction Scope
Runtime instructions explicitly require submission of user-provided spreadsheet files and text queries, confirm with the user before submitting, notify before calling the tool, and then call the included node helper. The helper validates file extensions (.csv/.xls/.xlsx/.tsv) and only uploads those files. The instructions and code do perform network requests to chartgen.ai (expected) and save returned artifacts to a media/workspace directory (expected for delivering images/PPT).
✓
Install Mechanism
No external install step or downloads; the skill is instruction-only with a bundled Node.js helper (no third-party package downloads). This is low-risk compared with fetching arbitrary binaries from the network.
ℹ
Credentials
Declared requirement is a single CHARTGEN_API_KEY, which is proportional. The helper will also look for an API key in several local config paths (OPENCLAW_STATE_DIR, ~/.openclaw/..., ~/.config/chartgen/api_key, ~/.chartgen/api_key) if the env var is not set — this behavior is reasonable to streamline auth but means the tool may read small local config files to locate a key. No other unrelated secrets or credentials are requested.
✓
Persistence & Privilege
always:false and no elevated privileges requested. The helper creates/uses a media/workspace directory (OPENCLAW_STATE_DIR or ~/.openclaw or tmp) to write artifact files and may create those directories, which is normal for delivering images/PPT. It does not modify other skills or system-wide settings.
Assessment
This skill appears internally consistent and implements exactly what it says: it uploads spreadsheets (only .csv/.xls/.xlsx/.tsv) to chartgen.ai using CHARTGEN_API_KEY and returns visual artifacts. Before installing, consider: 1) Only provide data files you are comfortable uploading to an external service (chartgen.ai). Avoid sending files containing credentials or sensitive secrets. 2) The helper will try to find your API key in environment variables and a few local config paths (e.g., ~/.config/chartgen/api_key, ~/.chartgen/api_key, or OpenClaw state) if CHARTGEN_API_KEY isn't set — if you keep other secrets in those locations, be cautious. 3) The skill writes returned images/PPT to a media/workspace directory (under OPENCLAW_STATE_DIR or ~/.openclaw or /tmp); check those locations if you have storage/privacy constraints. 4) Network calls go to chartgen.ai by default; if you need a self-hosted endpoint, verify and override BASE_URL before use. If you need higher assurance, inspect the included tools/chartgen_api.js file yourself and test with non-sensitive sample data first.

Like a lobster shell, security has layers — review code before you run it.

latestvk978egpvch5d5797s8g6hyv18583ghr3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvCHARTGEN_API_KEY

Comments