PRD Visualization Skill

Creates interactive D3.js hierarchy visualizations with multiple view modes (List, Force-Directed, Radial Cluster, with Fractal Tree coming soon). Use when u...

This skill appears to implement a local D3-based PRD/hierarchy visualizer and includes the HTML and D3 library, but proceed with caution. Before installing or allowing autonomous use: 1) Manually inspect SKILL.md and the included files (hierarchy-visualizer.html, the JSON sample, and d3.min.js) for any unexpected code, network calls, or base64/obfuscated blocks (the scanner flagged a base64-block). 2) Confirm where the agent would read and write files—give explicit file paths and consent before the agent reads PRD files or writes requirements-hierarchy.json to your project to avoid accidental overwrites. 3) Run the visualizer in an isolated environment or local sandbox and verify the HTML does not call external endpoints. 4) If you want autonomous invocation, restrict its scope (require explicit user confirmation before file I/O or starting servers). If you are not comfortable reviewing the files, do not enable autonomous use and ask the skill author for clarification about the flagged content and the asset path mismatch.

Type: OpenClaw Skill Name: prd-visualization-skill Version: 1.0.0 The skill bundle instructs the AI agent to start a local Python HTTP server (`python3 -m http.server 8080`) directly within the user's project directory (SKILL.md). This is a high-risk behavior because it exposes the entire contents of the project folder—including potentially sensitive files like `.env`, `.git`, or private keys—to anyone on the local network. While this is a common (though insecure) method to bypass CORS for local development, it lacks proper security isolation. No evidence of intentional data exfiltration or malicious external communication was found in the provided HTML or D3.js library.