📦 R ggplot Quickplot — 零代码绘图
v3.1.0上传 CSV 即可秒出 9 种 ggplot2 经典图表（散点、柱状、箱线、折线、直方图、分面等），无需安装，Docker/Singularity 一键运行，零代码完成数据可视化。
0· 137·0 当前·0 累计
by 下载技能包
最后更新
2026/3/22
安全扫描
OpenClaw
可疑
high confidenceThe skill's files and runtime instructions mostly match a ggplot visualization tool, but several critical inconsistencies (missing run_plot.R and missing build definition files, plus divergent 'requires' metadata) mean it cannot be trusted to work as advertised without further inspection.
评估建议
Key things to consider before installing or running this skill:
- Do not run the build/run scripts blindly. The package references run_plot.R, Dockerfile, and Singularity.def, but those files are missing from the manifest — the tool cannot run as advertised until you obtain or inspect run_plot.R and the image definitions.
- If you plan to build or run the Docker/Singularity modes, review the Dockerfile / Singularity.def and the R script (run_plot.R) first to ensure they do not execute unexpected...详细分析 ▾
⚠ 用途与能力
The name/description (CSV -> 9 ggplot2 charts, Docker/Singularity support) is consistent with the presence of config, sample data, and build/run scripts. However the package is missing key runtime/build artifacts referenced by the docs: run_plot.R (the R script the wrappers call) is not present in the manifest, and the SKILL.md metadata references a Dockerfile and Singularity.def that are not included. Additionally, two SKILL.md variants declare different required binaries (one lists docker, another lists Rscript), which is an incoherence between declared requirements and runtime files.
ℹ 指令范围
The included shell scripts (run.sh, run_docker.sh, run_singularity.sh, build_*.sh) operate only on local input/output paths, check for docker/singularity/R, and optionally build/push images. They do not attempt to read unrelated system files or leak data to remote endpoints. Note: build_docker.sh can push images to Docker Hub when DOCKER_USERNAME is set; run_docker.sh copies and mounts local input/output into containers — expected behavior but you should be aware this gives the container access to those host paths.
⚠ 安装机制
There is no formal install spec (instruction-only). That is low risk normally, but here it's inconsistent with the declared 'docker' build metadata because the repository does not include the referenced Dockerfile or Singularity.def, so the provided build scripts cannot complete as-is. No remote downloads or obscure URLs are used in the included scripts (good), but the missing build/runtime files are a practical problem and an incoherence.
✓ 凭证需求
No required environment variables or credentials are declared. Scripts optionally use DOCKER_USERNAME / DOCKER_IMAGE_NAME when pushing images; these are optional and proportional to the stated capability (publishing a Docker image). There are no requests for unrelated secrets or config paths.
✓ 持久化与权限
The skill does not request permanent/automatic inclusion (always:false) and does not modify other skills or system-wide configs. Execution involves running containers or R scripts and creating output files in local directories — expected for this use case.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSLinux · macOS · Windows
版本
latestv3.1.02026/3/22
优化图表检测逻辑，支持任意列名的CSV数据；改进通用数据兼容性
● 可疑
安装命令
点击复制官方npx clawhub@latest install r-ggplot-quickplot
镜像加速npx clawhub@latest install r-ggplot-quickplot --registry https://cn.longxiaskill.com镜像同步中