扫描报告
5 /100
kmind-markdown-to-mindmap-cn
将 Markdown 大纲或纯文本转换为 KMind 导图，并导出 SVG 或 PNG 图片
A legitimate markdown-to-mindmap converter with no malicious behavior detected. The skill is a straightforward wrapper that spawns a local CLI tool for rendering.
可以安装
No action required. The skill operates as documented with no hidden functionality.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | WRITE | WRITE | ✓ 一致 | SKILL.md:65 - output file writes |
| 命令执行 | WRITE | WRITE | ✓ 一致 | scripts/kmind-render.mjs:12 - spawns node process to run CLI |
| 网络访问 | NONE | NONE | — | No network calls in code; claims offline operation |
| 环境变量 | NONE | NONE | — | No environment variable access detected |
1 项发现
中危 外部 URL 外部 URL
https://kmind.app SKILL.md:9 目录结构
4 文件 · 5.9 KB · 127 行 Markdown 1f · 86L
JavaScript 1f · 29L
YAML 1f · 7L
JSON 1f · 5L
├─
▾
agents
│ └─
openai.yaml
YAML
├─
▾
scripts
│ └─
kmind-render.mjs
JavaScript
├─
package.json
JSON
└─
SKILL.md
Markdown
安全亮点
✓ No base64 payloads or encoded commands
✓ No credential harvesting or sensitive path access
✓ No network exfiltration detected
✓ No remote script execution (curl|bash patterns)
✓ Subprocess usage clearly documented in SKILL.md
✓ No hidden functionality in code
✓ No eval() calls or dynamic code execution
✓ Clean, straightforward wrapper pattern