📦 Mermaid Renderer — 图表渲染
v1.0.0将 Mermaid 文本一键渲染为流程图、时序图、类图、饼图、Git 分支图等，支持终端 ASCII 预览与 PNG 图片导出，让文档与演示瞬间可视化。
0· 93·1 当前·1 累计
by @smallnest下载技能包
最后更新
2026/3/25
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Before installing or enabling: 1) Inspect the full scripts/render.py to confirm whether it uploads PNGs and to which endpoint; if it uploads to 'BOS' look for explicit upload code and what credentials/env vars it uses. 2) If you expect image upload, require the maintainer to declare which env vars are needed (and why) — do not supply cloud credentials until you verify the destination and access scope. 3) Ensure required Python packages (termaid, matplotlib, numpy) are installed from trusted sour...详细分析 ▾
ℹ 用途与能力
Name, description, SKILL.md and scripts/render.py align: the code parses Mermaid text and renders either terminal ASCII (via termaid) or PNGs (via matplotlib). Supported chart types in references/chart-types.md match the parser's branches. This is internally coherent for a renderer.
⚠ 指令范围
SKILL.md instructs using `python3.11 -m termaid` for terminal output and calling scripts/render.py for images — that matches the code. However SKILL.md also states that generated PNGs are 'uploaded to BOS' but there are no declared env vars, config paths, or instructions for credentials; the visible portion of scripts/render.py does not show an upload implementation (file is truncated), creating an unexplained behavior gap.
ℹ 安装机制
There is no install spec (instruction-only skill), and the included script expects Python 3.11 plus third-party packages (termaid, matplotlib, numpy). That is low-risk as long as you trust and install those packages yourself; the skill does not download arbitrary code at install time.
⚠ 凭证需求
The skill declares no required environment variables or credentials, yet SKILL.md mentions uploading images to 'BOS' (object storage), which would normally require credentials (API key/secret). This mismatch is a red flag: either the upload is not implemented or it expects hidden/default credentials — neither is declared.
✓ 持久化与权限
The skill does not request always:true or any persistent/system-wide changes. It is user-invocable and allows autonomous invocation (platform default), which is normal for a skill of this type.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/25
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install mermaid-renderer
镜像加速npx clawhub@latest install mermaid-renderer --registry https://cn.longxiaskill.com