Scan Report
5 /100
kmind-markdown-to-mindmap-cn
将 Markdown 大纲或纯文本转换为 KMind 导图，并导出 SVG 或 PNG 图片
A legitimate markdown-to-mindmap converter with no malicious behavior detected. The skill is a straightforward wrapper that spawns a local CLI tool for rendering.
Safe to install
No action required. The skill operates as documented with no hidden functionality.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | SKILL.md:65 - output file writes |
| Shell | WRITE | WRITE | ✓ Aligned | scripts/kmind-render.mjs:12 - spawns node process to run CLI |
| Network | NONE | NONE | — | No network calls in code; claims offline operation |
| Environment | NONE | NONE | — | No environment variable access detected |
1 findings
Medium External URL 外部 URL
https://kmind.app SKILL.md:9 File Tree
4 files · 5.9 KB · 127 lines Markdown 1f · 86L
JavaScript 1f · 29L
YAML 1f · 7L
JSON 1f · 5L
├─
▾
agents
│ └─
openai.yaml
YAML
├─
▾
scripts
│ └─
kmind-render.mjs
JavaScript
├─
package.json
JSON
└─
SKILL.md
Markdown
Security Positives
✓ No base64 payloads or encoded commands
✓ No credential harvesting or sensitive path access
✓ No network exfiltration detected
✓ No remote script execution (curl|bash patterns)
✓ Subprocess usage clearly documented in SKILL.md
✓ No hidden functionality in code
✓ No eval() calls or dynamic code execution
✓ Clean, straightforward wrapper pattern