diagram-generator - 图表生成与编辑工具
v1.1.1提供基于自然语言描述的图表生成和编辑能力,支持 drawio、mermaid、excalidraw 等多种格式,涵盖流程图、时序图、类图、ER 图、思维导图、架构图、网络拓扑等常见图表类型。可自动创建目录,默认输出至项目根目录 diagrams/{format}/,并可自定义路径。
36· 2.0万·201 当前·208 累计
下载技能包
最后更新
2026/4/22
此技能需要访问外网资源,可能需要科学上网
安全扫描
OpenClaw
安全
medium confidence该技能的请求和指令与图表生成助手内部保持一致,文件创建委托给外部的 'mcp-diagram-generator' 服务器,但推荐的 npx 自动下载步骤引入了供应链风险,启用前需进行审查。
评估建议
技能仅在配置的 diagrams/{format}/ 目录下写入文件,不会影响系统其他路径;图表生成在独立的 mcp-diagram-generator 服务器中执行,实现与主流程的隔离;生成的 drawio、mermaid、excalidraw 文件均为纯文本,不含可执行代码。但仍需确保外部依赖工具来源可信,建议检查输出目录权限、定期清理生成文件、确认 MCP Server 安装来源可靠。...详细分析 ▾
✓ 用途与能力
The name/description (generate & edit drawio/mermaid/excalidraw) matches the instructions: it builds JSON specs and calls an MCP server to produce files. No unrelated credentials, binaries, or config paths are requested.
✓ 指令范围
SKILL.md confines actions to creating JSON specs, validating them against the included schema, and calling the mcp-diagram-generator MCP server. It only references project-local output paths and a per-skill config file (.diagram-config.json). There are no instructions to read unrelated system files or exfiltrate data.
ℹ 安装机制
There is no built-in installer in the skill (instruction-only). The doc recommends configuring an MCP server to be auto-started via 'npx -y mcp-diagram-generator' — this will download and run code from the npm registry. That is a normal convenience but is a supply-chain risk (npm package code executes locally). If you prefer, the skill also documents running a local node path for development.
✓ 凭证需求
The skill requests no environment variables, no credentials, and no config paths. The declared requirements match the instructions (the only external dependency is the MCP server). There are no unexplained SECRET/TOKEN/KEY requests.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated agent privileges. It will create a local .diagram-config.json and directories under the project (diagrams/{format}/) — behavior consistent with its purpose.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.12026/2/3
小幅更新,文档改进并提升描述清晰度。新增用户支持联系信息。完善英文描述以便更好理解功能和使用方式。未更改功能或代码,保持原有功能不变。
● 可疑
安装命令
点击复制官方npx clawhub@latest install diagram-generator
镜像加速npx clawhub@latest install diagram-generator --registry https://cn.longxiaskill.com 镜像可用
国内专用npx -p mcp-diagram-generator --registry=https://registry.npmmirror.com install
本土化适配说明
使用时通过 npx 自动下载 mcp-diagram-generator,已在 npm 镜像源(registry.npmmirror.com)配置,可加速下载。若已有本地服务器,可直接指向其地址,无需额外安装。