Mermaid Renderer

渲染 Mermaid 图表。当用户需要可视化展示流程图、时序图、类图、饼图、Git分支图等图表时使用。支持两种输出模式：1) 终端 ASCII 文本输出（默认）；2) 图片文件导出（指定 --image/--png 参数）。触发场景包括"画个流程图"、"生成时序图"、"渲染Mermaid图表"、"导出图表为图片"等。

Before installing or enabling: 1) Inspect the full scripts/render.py to confirm whether it uploads PNGs and to which endpoint; if it uploads to 'BOS' look for explicit upload code and what credentials/env vars it uses. 2) If you expect image upload, require the maintainer to declare which env vars are needed (and why) — do not supply cloud credentials until you verify the destination and access scope. 3) Ensure required Python packages (termaid, matplotlib, numpy) are installed from trusted sources; termaid is invoked as a module so review its behavior. 4) Run the skill in a sandbox or with limited privileges first to observe network activity. 5) If you cannot review the remaining part of render.py or the author/source is unknown, avoid supplying secrets or enabling automatic uploads — consider editing the script to save images locally only.

Type: OpenClaw Skill Name: mermaid-renderer Version: 1.0.0 The skill bundle provides a legitimate utility for rendering Mermaid diagrams into either ASCII text or PNG images. The `scripts/render.py` file contains extensive logic using `matplotlib` to parse and draw various diagram types (flowcharts, sequence diagrams, Gantt charts, etc.), and `SKILL.md` correctly describes the tool's functionality without any suspicious instructions or prompt-injection attempts. The use of `subprocess.run` to call the `termaid` module is handled safely via standard input, and no evidence of data exfiltration, unauthorized network access, or malicious intent was found.