Chart Generator
v1.0.2Data visualization chart generator. Use when user needs to create charts from data for reports, presentations, or documents. Supports bar, line, pie, scatter...
⭐ 0· 199·1 current·1 all-time
by@tobewin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (chart generation) align with the requested binary (python3) and the Python/matplotlib/pandas toolchain referenced in SKILL.md. Declared features (Excel/Word output) match the listed Python libraries (openpyxl, python-docx).
Instruction Scope
SKILL.md contains concrete Python script templates that will be run locally (via a heredoc calling python3). The templates read/process data and save chart files — which is appropriate for the stated purpose. Caution: the skill instructs running generated Python code with user-supplied data; if user inputs are interpolated into the script without sanitization this could allow code-injection or execution of unintended commands. SKILL.md does not instruct any network calls or access to unrelated system paths.
Install Mechanism
This is instruction-only (no install spec, no code files) which minimizes risk. Minor inconsistency: SKILL.md frontmatter lists a 'dependencies' line ('pip install matplotlib pandas openpyxl python-docx pillow') but the registry metadata contains no install step — packages will not be automatically installed by the skill. Users must install these packages themselves for the skill to work.
Credentials
The skill requests no environment variables, credentials, or config paths. The requested tools/libs are proportional to chart generation and document export.
Persistence & Privilege
always is false and default autonomy is allowed (normal for skills). The skill does not request permanent presence or system-wide config changes.
Assessment
This skill appears to do what it says: generate charts by running Python code locally. Before installing/using it:
- Ensure python3 and the required Python packages (matplotlib, pandas, openpyxl, python-docx, pillow) are installed from trusted package indexes (pip). The skill will not auto-install them.
- Understand that the skill runs Python code on the host (via a heredoc); do not feed it sensitive secrets or allow it to process untrusted data you wouldn't want executed. If you paste data or URLs, verify what gets inserted into the script to avoid injection.
- The SKILL.md mentions 'web' and 'document extraction' as data sources — the instructions do not automatically fetch remote content; supplying URLs or files is under your control.
- If you need offline or air-gapped guarantees, run the provided scripts locally in a controlled environment (virtualenv/container).
Overall: coherent for chart generation, but because it executes Python code locally, treat it like any tool that runs code and verify inputs and dependencies before use.Like a lobster shell, security has layers — review code before you run it.
latestvk9796amnfvyntcktpx74ng26kh83gdv7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binspython3