ClawHub

AI skills for GitHub Copilot, Claude Code, and OpenClaw to generate professional mind maps via the EdrawMind API.

v1.0.1

Generate professional mind maps from natural language topics or structured Markdown using EdrawMind API with customizable layouts, themes, backgrounds, and h...

⭐ 1· 244·2 current·2 all-time
by@wondershare-boop
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description, SKILL.md, and the included CLI script all describe a Markdown→mindmap workflow that posts to EdrawMind HTTP endpoints. The script declares EdrawMind API endpoints (_CN_API_URL, _GLOBAL_API_URL) and returns file_url/thumbnail_url as the SKILL.md requires — functionality aligns with purpose.
ℹ
Instruction Scope
SKILL.md tells the agent to read Markdown files or generate Markdown outlines and in some cases to "explore the codebase" to create maps from project structure. Exploring a repository (reading project files) is coherent with generating architecture maps, but it's a broad action: ensure the agent only reads files needed for the map and not unrelated sensitive files. The SKILL.md does not instruct collecting environment files, shell history, or credentials.
✓
Install Mechanism
No install spec — instruction-only with an included Python script. Nothing is downloaded from arbitrary URLs and the script is zero-dependency, so install risk is low.
ℹ
Credentials
Registry metadata lists no required env vars, which matches SKILL.md. The CLI does optionally accept an API key (via --api-key or the EDRAWMIND_API_KEY env var) and sends it as X-API-Key; that is proportionate for calling a paid/privileged API. The script also exposes options to override api_url and to disable SSL verification (insecure mode) — useful for debugging but these flags could be abused to redirect data to a non-EdrawMind endpoint. Confirm you only provide an API key to the official EdrawMind service and avoid overriding api_url or enabling insecure mode.
✓
Persistence & Privilege
Skill is not always:true, does not request system-level persistence, and does not modify other skills' configs. It runs a script on demand and requires Python 3 at runtime; no elevated privileges are requested.
Assessment
This skill appears to do what it says: convert Markdown to EdrawMind mind maps. Before installing or invoking it, verify the skill source (owner unknown) and that you trust the included script. If you need to provide an API key, only use a key for the official EdrawMind domains (mindapi.edrawsoft.cn / api.edrawmind.com). Be cautious if asked to: (a) let the agent "explore the codebase" — scope that to only the folders needed for the map, and (b) override the api_url or enable insecure mode — those actions could send your content to an arbitrary server. Also note a minor bug in the script: the fill-style field is misspelled ('fill_hand_drawm') which may prevent some style options from being sent; this is an implementation issue, not evidence of malice. If provenance or trust is important, request the publisher's identity or an official EdrawMind confirmation before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk970wjhb7dkn919s26t5m8tx9n8353d0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments