complex-causal-analysis
v1.0.0Generates interactive D3.js Sankey-style causal network diagrams showing hierarchical cause-effect relationships with evidence and adjustable nodes.
⭐ 0· 98·0 current·0 all-time
by@zmqnk
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (interactive D3 Sankey-style causal diagrams) match the provided SKILL.md, README, and template.html. The included template and example data implement the declared features (layers, color-coded strengths, arrows, sidebar, detail panel). No unexpected credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to generate JSON and produce a standalone HTML file; template.html contains the visualization code and an example dataset. One small contradiction: SKILL.md claims "No external dependencies" but explicitly embeds D3.js via a CDN — opening the output in a browser will cause a network fetch from d3js.org. Otherwise the instructions do not ask the agent to read unrelated files, exfiltrate data, or call unknown endpoints.
Install Mechanism
There is no install spec and no code to download or execute on the agent. This instruction-only skill will only produce an HTML file; nothing is written to disk by an installer. Low installation risk.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The runtime instructions and template do not reference secrets or external service tokens.
Persistence & Privilege
always is false and the skill does not request persistent or elevated platform privileges. It does not modify other skills or agent-wide settings.
Assessment
This skill appears to do what it says: it generates a standalone HTML D3 visualization from user-supplied JSON and includes a ready-made template and example data. Things to consider before installing/using:
- Network note: the template loads D3 from https://d3js.org (CDN). If you need fully offline artifacts, ask the skill to embed a local copy of d3 or manually host d3 locally. The SKILL.md's "No external dependencies" claim is inconsistent with the CDN usage.
- Data privacy: the generated HTML will contain your input data (nodes/links). If that data is sensitive, avoid opening the file in an environment that can access external networks or inspect the file first.
- Review output before opening in a browser if you have strict security requirements — although the files provided contain only client-side visualization code, opening any HTML can cause your browser to fetch remote resources (the D3 CDN) or run JavaScript.
- No credentials or system access are required, and there is no install step, so the risk surface is primarily the usual browser/network considerations when opening generated HTML.Like a lobster shell, security has layers — review code before you run it.
latestvk97f1747p1s6xp8v2dxv2yh77d83474k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.