Data Visualization

Data visualization with chart selection, color theory, and annotation best practices. Covers chart types (bar, line, scatter, heatmap), axes rules, and story...

Install only if you trust inference.sh. Prefer the manual checksum-verification path when possible, and avoid sending confidential datasets, customer records, or sensitive business metrics through `infsh` chart-generation commands unless the provider's account, billing, and data-handling terms are acceptable.

Type: OpenClaw Skill Name: data-visualization-2 Version: 0.1.5 The skill is classified as suspicious due to two primary indicators in `SKILL.md`. First, it instructs the AI agent to install the `inference.sh` CLI using `curl -fsSL https://cli.inference.sh | sh`. This method of executing remote scripts is inherently risky, as it bypasses traditional package management and executes arbitrary code directly, posing a significant supply chain vulnerability if the remote server (cli.inference.sh) were compromised. Second, the skill grants broad `allowed-tools: Bash(infsh *)` permissions, allowing the agent to execute any command prefixed with `infsh`. While the provided examples use `infsh` for benign data visualization tasks, this broad permission creates a large attack surface for prompt injection, enabling an attacker to potentially instruct the agent to use other `infsh` capabilities for malicious purposes (e.g., file system access, network calls) if `infsh` supports them, without explicit malicious intent originating from this skill bundle itself.