Mermaid Workflow Skill

生成Mermaid图表定义文件，调用Mermaid CLI转换为PNG，并将图片链接插入指定Markdown文件位置。

What to check before installing/using: 1) The skill needs Mermaid CLI (mmdc) and Node/npm; the registry metadata omitted that—install mmdc (or use npx) beforehand. 2) Inspect the included scripts yourself (they are plain Python) — they run subprocesses (mmdc or npx) and will modify Markdown files and may create a puppeteer config in your home directory. 3) The conversion uses Puppeteer with --no-sandbox to avoid sandbox errors; that flag reduces Chromium sandboxing and may be undesirable on multi-tenant hosts — avoid or constrain usage on sensitive systems (use a container/CI runner instead). 4) Run the quick_start in an isolated environment (local VM or container) the first time, and back up any Markdown files before using insertion features. 5) If you want to allow autonomous agent invocation, be aware it will be able to run the scripts which execute shell commands and write files locally. If these points are acceptable and you trust the package, the skill appears coherent otherwise; if you need higher assurance, request the package author to update registry metadata to declare required binaries and provide signed release details.

Type: OpenClaw Skill Name: mermaid-workflow-skill Version: 1.0.0 The skill's core purpose of creating, converting, and inserting Mermaid diagrams is benign. However, it is classified as 'suspicious' due to the explicit and repeated use of the `--no-sandbox` flag for Puppeteer/Chromium in `SKILL.md`, `quick_start.sh`, and `scripts/convert_mermaid.py`. This disables a critical security feature, making the system vulnerable to potential sandbox escapes if `mmdc` processes untrusted input. Additionally, `scripts/convert_mermaid.py` executes external commands via `subprocess.run` and `scripts/create_mermaid.py` embeds user input directly into Mermaid templates, which, without robust sanitization, could introduce command injection or rendering-based vulnerabilities, although no clear malicious intent for self-exploitation is observed. There is no evidence of data exfiltration, persistence, or other malicious activities.