ClawHub

ChartGen AI

v1.0.0

Use this skill when the user wants to create visualizations (charts, dashboards, diagrams, Gantt, PPT), analyze data (Excel/CSV upload, cross-file analysis,...

⭐ 0· 66·0 current·0 all-time
byChartGen AI@chartgen-ai·duplicate of @chartgen-ai/chartai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (visualizations, data analysis, PPT) match the implementation: the skill calls a remote ChartGen API, uploads spreadsheets, polls for task completion, and returns artifacts. Required env var CHARTGEN_API_KEY and an optional CHARTGEN_API_URL are appropriate and proportional for a remote API client.
ℹ
Instruction Scope
SKILL.md confines the agent to explicit steps (confirm, notify, submit via node tools/chartgen_api.js, poll, deliver). The runtime helper does read user files that are explicitly provided for upload and writes artifact files into an OpenClaw media/workspace or temp dir. The only noteworthy scope expansion is the helper's key-resolution behavior: if CHARTGEN_API_KEY is not set, it will search several standard config paths under the user's home or OPENCLAW_STATE_DIR to find an API key. This is a convenience feature but means the tool may read small config files in the user's home directory to obtain credentials.
✓
Install Mechanism
No install spec and the included tool has zero external downloads or npm dependencies (uses built-in Node.js libs). This is a low-risk, instruction-only install footprint; code is shipped with the skill rather than fetched at runtime.
ℹ
Credentials
Only CHARTGEN_API_KEY is declared as required, which is appropriate. The helper also accepts optional CHARTGEN_API_URL and honors OPENCLAW_STATE_DIR for paths. It will attempt to read API keys from several user config files (e.g., ~/.chartgen/api_key, ~/.config/chartgen/api_key, and OpenClaw skill config paths) if the env var isn't set — reasonable for convenience but worth knowing because it reads user home config files.
✓
Persistence & Privilege
The skill does not request always:true or other elevated/always-present privileges. It stores artifacts under OpenClaw media/workspace or a temp dir and may create those directories; it does not modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it says: it uploads spreadsheets to chartgen.ai and returns charts/PPT/results. Before installing: (1) Only provide spreadsheets and data you are willing to upload to the ChartGen service—do not include secrets or private keys in files. (2) Provide a CHARTGEN_API_KEY you trust; if you do not set the env var the tool will try to read API keys from standard config files in your home directory (e.g., ~/.chartgen or ~/.config), so remove any sensitive keys from those locations if you don't want them used. (3) Note artifacts are written to your OpenClaw media/workspace (or /tmp); ensure you are comfortable with that storage location. (4) Verify the endpoint (CHARTGEN_API_URL defaults to https://chartgen.ai) if you need to point to a private instance. If you want stronger isolation, set CHARTGEN_API_KEY explicitly in the skill's environment and avoid uploading sensitive files.

Like a lobster shell, security has layers — review code before you run it.

latestvk973rrbvaxzfj6ynct7c61qnns83h9hm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvCHARTGEN_API_KEY

Comments