Vizboard

Generate beautiful, self-contained HTML dashboards and visual pages — architecture diagrams, flowcharts, KPI dashboards, data tables, diff reviews, plan revi...

This skill mostly does what it says (reads a repo, runs git, and generates self-contained HTML reviews), but there are a few things to check before installing or enabling it: - Privacy of agent memory: the prompts explicitly point the agent at files like ~/.agent/memory/... and ~/.pi/agent/memory/.... Those paths may contain private conversation history or other sensitive state. If you don't want the skill to read agent memory, don't enable it or remove those references from the templates. - External calls are optional but possible: the skill will avoid external assets by policy, but references/libraries.md documents CDN usage and some prompts will call a local 'surf' CLI (surf gemini) to generate images. If 'surf' is present, it could send page content to an external image service. If you are concerned about sending repository contents externally, ensure surf is not installed or forbid the skill from invoking it. - Conflicting guidance: SKILL.md requires 'fully self-contained' HTML, but the references include CDN snippets. If you need a guarantee of zero network contact, inspect templates and references and remove CDN imports; test the generator in an offline environment. - File access and delivery: the skill saves to ~/.agent/diagrams and copies files into the agent workspace then runs a 'send' action. Confirm how your platform's 'message(action="send", filePath=...)' behaves (is the file uploaded to the cloud, kept local, or forwarded to third parties?). If unsure, run the skill on a non-sensitive test repo first. - Least privilege: because the skill executes many git and file-read actions, only enable it in contexts where the agent is allowed to read the repository and home-directory memory. If you want the functionality but not memory access, edit the SKILL.md/prompts to remove any references to ~/.agent or ~/.pi paths. If you want, I can produce a short list of edits to the SKILL.md (remove memory-path references, remove CDN examples, and add an explicit 'do not call surf' flag) so the skill is more privacy-preserving and internally consistent.

Type: OpenClaw Skill Name: vizboard Version: 1.0.0 The vizboard skill bundle is a visualization utility designed to generate self-contained HTML dashboards, diagrams, and technical reviews (diffs, plans, and project recaps). It uses standard developer tools like git, grep, and the GitHub CLI (gh) to gather context from the codebase and agent memory. While the skill has the capability to modify files (specifically for fact-checking and correcting its own generated reports) and performs file management in ~/.agent/diagrams/, its behavior is transparent and strictly aligned with its stated purpose of improving technical documentation. No evidence of data exfiltration, malicious persistence, or unauthorized command execution was found.