← Back to Skills Marketplace
Mindflow
by
zhangshulin
· GitHub ↗
· v1.0.6
· MIT-0
319
Downloads
1
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install mindflow
Description
Converts text, Markdown files, or Txt files into mind map images. Use this skill when users want to generate mind maps/brain maps from articles, broadcast sc...
Usage Guidance
This skill appears to be what it claims (text → markmap → HTML → image) but proceed cautiously: 1) npm install will pull markmap and Puppeteer and Puppeteer will download a Chromium binary — only install on trusted hosts and consider pinning package versions or using a lockfile. 2) The SKILL.md expects an LLM conversion step; verify where that runs (locally vs external API) because sensitive content may be sent to a model endpoint. 3) Inspect the full html-to-image.js (the provided snippet was truncated in the review) to confirm there are no unexpected network calls, remote endpoints, or shell executions before running it. 4) Run the code in a sandboxed environment (container/VM) if you must test it, and avoid feeding sensitive files until you confirm the runtime behavior. If you want, provide the complete html-to-image.js (untruncated) and any package.json or lockfile so I can re-evaluate and raise the confidence level.
Capability Analysis
Type: OpenClaw Skill
Name: mindflow
Version: 1.0.6
The skill exhibits risky capabilities including arbitrary local file reading and shell command execution (markmap, node) which, while aligned with its stated purpose of mind map generation, pose a security risk. Specifically, the 'scripts/html-to-image.js' utility uses Puppeteer with the '--no-sandbox' and '--disable-setuid-sandbox' flags, significantly reducing browser isolation and increasing the impact of potential XSS-to-RCE vulnerabilities if processing untrusted input. The instructions in 'SKILL.md' also direct the agent to read user-provided file paths without explicit validation or sandboxing.
Capability Assessment
Purpose & Capability
Name/description (convert text/markdown to mind-map images) matches the declared dependencies (markmap-cli, markmap-lib, markmap-render, puppeteer) and the included html-to-image.js script which renders HTML to image using Puppeteer.
Instruction Scope
SKILL.md stays on-topic: it instructs using an LLM to convert input to a strict markmap-style Markdown, runs markmap to produce HTML, and a local Node script to render images. It writes a temp file (/tmp/mindmap.md) and runs local commands. One scope note: the LLM step is underspecified (which model/API is used and where conversion occurs), which could cause user data to be sent to an external model endpoint depending on agent configuration.
Install Mechanism
There is no formal install spec in the package; SKILL.md instructs users/agents to run npm/bun installs for markmap and puppeteer. Puppeteer typically downloads a Chromium binary during install (network download from upstream). The instructions do not pin package versions or specify integrity checks, so running installs will fetch code/binaries from public registries and CDNs — a moderate operational risk that should be reviewed before running.
Credentials
The skill requests no environment variables or credentials. This is proportionate to its stated purpose. Caveat: the LLM conversion step may require model credentials in the environment (not declared) depending on how the agent is configured; confirm where LLM calls will be executed.
Persistence & Privilege
The skill is not forced-always, does not request elevated privileges, and does not declare modifications to other skills or system-wide configuration. It runs transient local commands and writes temporary files (e.g., /tmp/mindmap.md).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mindflow - After installation, invoke the skill by name or use
/mindflow - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.6
- Added a requirement to use appropriate emojis to enhance visual expression in generated mind map content.
- Clarified not to use emojis excessively.
v1.0.5
- Clarified token content limit in step 1 instructions
- Minor documentation improvements for consistency and emphasis
v1.0.4
- Increased the content token limit for mind map generation from 250 to 300.
- Added the --offline option to the markmap command for offline HTML generation.
- Updated documentation to reflect these changes in workflow and execution steps.
v1.0.3
**Major update: Switched image rendering dependencies and improved auto-fit output**
- Replaced node-html-to-image with puppeteer as image rendering dependency.
- Updated default output format to PNG with auto-fit sizing for mindmaps.
- Adjusted LLM output constraint from 500 characters to 250 tokens.
- Documented new installation steps and clarified compatibility requirements.
- Improved CLI examples and clarified parameter descriptions.
v1.0.2
- Increased default output image resolution from 1920x1080 to 2560x1664 for higher quality mind map images.
- Minor documentation updates and formatting improvements within SKILL.md.
- Clarified dependency requirements and removed mention of default output format in the description.
v1.0.1
Version 1.0.1 of mindflow
- No changes detected in files or SKILL.md content.
- Functionality and usage remain unchanged from the previous version.
v1.0.0
Initial release of mindflow.
- Converts text, Markdown, or Txt files into mind map images.
- Supports specifying image format (default: jpg) and resolution.
- Strict formatting rules for mind map generation: one root node, max 4 levels, 500-character output limit.
- Requires dependencies: markmap-cli, markmap-lib, markmap-render, node-html-to-image.
- Designed to trigger for any mind map/brain map request, in English or Chinese ("mind map" or "思维导图").
Metadata
Frequently Asked Questions
What is Mindflow?
Converts text, Markdown files, or Txt files into mind map images. Use this skill when users want to generate mind maps/brain maps from articles, broadcast sc... It is an AI Agent Skill for Claude Code / OpenClaw, with 319 downloads so far.
How do I install Mindflow?
Run "/install mindflow" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mindflow free?
Yes, Mindflow is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Mindflow support?
Mindflow is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Mindflow?
It is built and maintained by zhangshulin (@newtoolai); the current version is v1.0.6.
More Skills