Data Visualization

Data visualization with chart selection, color theory, and annotation best practices. Covers chart types (bar, line, scatter, heatmap), axes rules, and story...

Review this before installing. Prefer manual, version-pinned installation of the inference.sh CLI, inspect installer contents, and avoid sending private datasets, credentials, or proprietary code through infsh app runs unless you trust that service and understand where login credentials are stored.

Type: OpenClaw Skill Name: data-visualization-2 Version: 0.1.5 The skill is classified as suspicious due to two primary indicators in `SKILL.md`. First, it instructs the AI agent to install the `inference.sh` CLI using `curl -fsSL https://cli.inference.sh | sh`. This method of executing remote scripts is inherently risky, as it bypasses traditional package management and executes arbitrary code directly, posing a significant supply chain vulnerability if the remote server (cli.inference.sh) were compromised. Second, the skill grants broad `allowed-tools: Bash(infsh *)` permissions, allowing the agent to execute any command prefixed with `infsh`. While the provided examples use `infsh` for benign data visualization tasks, this broad permission creates a large attack surface for prompt injection, enabling an attacker to potentially instruct the agent to use other `infsh` capabilities for malicious purposes (e.g., file system access, network calls) if `infsh` supports them, without explicit malicious intent originating from this skill bundle itself.