技能详情（站内镜像，无评论）
作者：Danny Shmueli @dannyshmueli
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v2.6.18
统计：⭐ 9 · 6.2k · 37 current installs · 39 all-time installs
⭐ 9
安装量（当前） 39
🛡 VirusTotal ：良性 · OpenClaw ：良性
Package：dannyshmueli/chart-image
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：良性
OpenClaw 评估
The skill's files, runtime instructions, and dependencies are coherent with its stated purpose (generating chart images with Vega/Vega‑Lite + Sharp); nothing requested is disproportionate or unexpected.
目的
Name/description match the actual footprint: included code (scripts/chart.mjs) and package.json depend on vega, vega‑lite, and sharp which are the expected libraries for server‑side chart rendering. No unrelated binaries, credentials, or config paths are requested.
说明范围
SKILL.md and CAPABILITY.md instruct the agent to run the included Node script and to pass data via JSON/temporary files. The README and capability docs explicitly warn against unsafe shell interpolation. The instructions do not attempt to read system secrets or reach out to external endpoints on their own; they rely on the operator to supply data (stdin, files, or CLI args).
安装机制
No formal install spec in registry; the skill instructs running `npm install` in the scripts folder. Installing pulls packages from the public npm registry (vega, vega‑lite, sharp and platform-specific sharp binaries listed in package-lock). This is expected for a Node-based tool but carries the usual moderate supply-chain risk of npm dependencies—nothing unusual like a remote tarball or URL shortener is used.
证书
The skill requests no environment variables, no credentials, and no config paths. That aligns with a self-contained chart generator that runs locally on provided data.
持久
Skill is not forced-always, and there is no indication it modifies other skills or global agent config. It runs as an on-demand script with no elevated persistence requirements.
综合结论
This skill appears to be what it says: a Node.js tool that renders charts using Vega/Vega‑Lite and Sharp. Before installing, consider these precautions: 1) Review the full scripts/chart.mjs source (it was included) and ensure it contains no unexpected network or filesystem operations beyond reading input and writing the output file. 2) Install dependencies (npm install) in an isolated environment or container (e.g., a Docker image or sandbox) …
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Chart Image」。简介：Generate publication-quality chart images from data. Supports line, bar, area, …。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/dannyshmueli/chart-image/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。