📦 pipintama-charts — 图表生成
v1.0.0通过MCP服务器创建、获取、分享或更新托管的Pipintama图表，支持折线、柱状、饼图、雷达图等多种类型，输入文本或结构化数据即可快速生成可视化图表，适合即时展示数据洞察。
0· 64·0 当前·0 累计
by @davidk2yoyo下载技能包
最后更新
2026/4/5
安全扫描
OpenClaw
可疑
medium confidenceThe skill's behavior (it requires and will use a Pipintama API key and send chart data to api.pipintama.com) is coherent with its description, but the package metadata does not declare the required credential and there are minor privacy/visibility defaults worth reviewing.
评估建议
This skill will call api.pipintama.com and requires a Pipintama API key to create or share hosted charts. Before installing: (1) confirm you trust the Pipintama service and the skill publisher (source/homepage unknown), (2) be aware the skill defaults to 'shared' visibility — avoid sending sensitive data unless you explicitly set visibility to private, (3) expect the agent to ask you for an API key at runtime since the registry metadata does not declare it (this is a metadata inconsistency), and...详细分析 ▾
✓ 用途与能力
The name/description match the instructions: the skill is about creating and managing hosted charts on a Pipintama MCP server. The listed tools and endpoints are appropriate for that purpose.
⚠ 指令范围
SKILL.md instructs the agent to call external MCP endpoints and to require an API key before making requests. It also prescribes a default visibility of 'shared' (which may expose data). The instructions themselves do not ask for unrelated system files or other credentials, but they do rely on network calls to a third-party endpoint and on agent-provided tools (e.g., create_chart) that are not implemented in the skill bundle — this is normal for instruction-only skills but increases reliance on the platform's tool wiring.
✓ 安装机制
No install spec and no code files are present (instruction-only). This minimizes local installation risk because nothing is written to disk by the skill package itself.
⚠ 凭证需求
SKILL.md clearly requires a Pipintama API key (Authorization: Bearer or x-api-key) but the registry metadata declares no required environment variables or primary credential. That mismatch is concerning: the skill expects credentials but does not advertise them, which can cause unexpected runtime prompts or improper handling of secrets. Aside from that, the requested credential is proportional to the skill's purpose and no unrelated secrets are requested.
✓ 持久化与权限
The skill is not always-enabled, does not request persistent system-level changes, and does not attempt to modify other skills or global agent config in its instructions. Autonomous invocation is allowed but is the platform default and not by itself a red flag here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/5
Initial release of pipintama-charts skill: - Create, fetch, share, update, and export hosted Pipintama Charts via the MCP server. - Supports line, bar, pie, and radar chart generation from user text or data. - Requires user-provided Pipintama API key for all actions. - Provides clear chart type selection guidance and response format standards. - Built-in guardrails for appropriate chart usage and secure URL handling. - Primary outputs: hosted chart viewer URL (and optional PNG export link).
● 无害
安装命令
点击复制官方npx clawhub@latest install pipintama-charts
镜像加速npx clawhub@latest install pipintama-charts --registry https://cn.longxiaskill.com镜像同步中