Skills data-visualization
📦

data-visualization

Content revision r1 Critical ⚙️ External commands🌐 Network access

Create Clear Data Visualizations

Raw metrics can confuse readers when chart choices, colors, and labels are inconsistent. This skill helps users choose the right chart, format it clearly, and explain the insight.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "data-visualization" from https://skillstore.io/skills/inference-sh-9-data-visualization.md and its manifest at https://skillstore.io/api/skills/inference-sh-9-data-visualization/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-sh-9-data-visualization.md Signed manifest GET /api/skills/inference-sh-9-data-visualization/manifest Signed lockfile GET /api/skills/inference-sh-9-data-visualization/lockfile

Test it

Using "data-visualization". A monthly revenue table with last year and this year values.

Expected outcome:

Use a two-line time series chart. Highlight the current year, mute last year, label the final values, and title it with the growth insight.

Using "data-visualization". A traffic source breakdown with six categories and one clear winner.

Expected outcome:

  • Use a sorted horizontal bar chart.
  • Highlight the winning source and use neutral colors for the rest.
  • Add value labels because exact percentages matter.

Using "data-visualization". A weekly activity matrix by day and hour.

Expected outcome:

Use a heatmap with readable hour and day labels, a sequential color scale, and annotations only where exact values matter.

Security Audit

Critical
v4 • 7/6/2026 Open versioned report

Most static findings are markdown fence false positives, but the skill contains confirmed external command examples. The critical issue is the curl-to-sh installer on SKILL.md line 14, combined with explicit permission to run the external infsh CLI.

1
Files scanned
211
Lines analyzed
8
Review items
0
False positives ignored

Confirmed security concerns (2)

Critical
SKILL.md:14
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh && infsh login
The command pipes a remote script directly into sh before login. This is a classic critical installer pattern because compromise of the remote endpoint or transport path leads to arbitrary code execution.
High
SKILL.md:4
External CLI Execution Permission
The skill declares allowed-tools: Bash(infsh *), allowing agents to run the inference.sh CLI. This can send prompts, chart inputs, generated code, or files to an external service.
The allowed-tools declaration is explicit and grants a command pattern for infsh. The risk is contextual because the skill examples rely on remote app execution.
Capability review items (8)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Critical
SKILL.md:14
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh && infsh login
The URL is used in curl -fsSL https://cli.inference.sh | sh, which downloads and executes a remote script. That creates a high-impact supply chain risk.
High
SKILL.md:13-20
Ruby/shell backtick execution
```bash
The bash quick start includes a remote installer piped to sh and an infsh command that executes chart code through an external CLI. The markdown fence is not executable by itself, but the contained commands are risky if followed.
Medium
SKILL.md:115-119
Ruby/shell backtick execution
```bash
The bash example runs infsh app run against infsh/python-executor and submits generated Python code to an external execution service. This is legitimate for the skill purpose but is still external command execution.
Medium
SKILL.md:123-127
Ruby/shell backtick execution
```bash
The bash example invokes infsh app run with infsh/python-executor and passes Python chart-generation code. Running it executes code through an external CLI service.
Medium
SKILL.md:131-135
Ruby/shell backtick execution
```bash
The bash block uses infsh app run infsh/html-to-image and sends provided HTML to an external renderer. This is an external command and may expose chart content to a third party.
Medium
SKILL.md:139-143
Ruby/shell backtick execution
```bash
The heatmap example runs infsh/python-executor through the infsh CLI with generated Python code. That is external command execution through a third-party service.
Medium
SKILL.md:181-185
Ruby/shell backtick execution
```bash
The dark mode chart recipe runs infsh app run with infsh/python-executor and supplied Python code. This is expected functionality but remains external command execution.
Medium
SKILL.md:204-208
Ruby/shell backtick execution
```bash
The related skills section includes npx skills add commands that install skills from an external source. This is a supply-chain-sensitive external command if copied or run.

Risk Factors

⚙️ External commands (21)
SKILL.md:13-20 SKILL.md:20-22 SKILL.md:22-45 SKILL.md:45-57 SKILL.md:57-86 SKILL.md:86-98 SKILL.md:98-115 SKILL.md:115-119 SKILL.md:119-123 SKILL.md:123-127 SKILL.md:127-131 SKILL.md:131-135 SKILL.md:135-139 SKILL.md:139-143 SKILL.md:143-157 SKILL.md:157-167 SKILL.md:167-181 SKILL.md:181-185 SKILL.md:185-204 SKILL.md:204-208 SKILL.md:208-210
🌐 Network access (3)
SKILL.md:9 SKILL.md:14 SKILL.md:22

Detected Patterns

Pipe to shell pattern
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/inference-sh-9-data-visualization/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-sh-9-data-visualization/security.svg)](https://skillstore.io/skills/inference-sh-9-data-visualization?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-sh-9-data-visualization?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-9-data-visualization/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-sh-9-data-visualization.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

inference-sh-9. (2026). data-visualization security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-9-data-visualization/audits/4

BibTeX citation

@techreport{inference-sh-9-inference-sh-9-data-visualization-2026, author = {inference-sh-9}, title = {data-visualization security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/inference-sh-9-data-visualization/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "data-visualization security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "inference-sh-9" date-released: "2026-07-06" url: "https://skillstore.io/skills/inference-sh-9-data-visualization/audits/4" identifiers: - type: other value: "skillstore:inference-sh-9-data-visualization:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

3 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage
0xkynz Recommended

0xkynz-data-visualization

Skillstore Score 78
Evidence Confidence High
Skillstore usage 72
Updated

2026-08-21

Dbxstudio

dbxstudio-data-visualization

Skillstore Score 78
Evidence Confidence High
Skillstore usage 10
Updated

2026-08-21

inference-sh-9 Current

inference-sh-9-data-visualization

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 13
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance

What You Can Build

Build Executive Dashboards

Create chart recommendations and KPI treatments for leadership reporting with clear titles and focused annotations.

Improve Analysis Charts

Convert exploratory tables into readable bar, line, scatter, heatmap, or distribution charts for stakeholder review.

Prepare Client Presentations

Design concise visuals that highlight the main insight and avoid misleading axes, colors, or chart types.

Try These Prompts

Choose a Chart Type 
I have this data relationship: [describe columns and goal]. Recommend the best chart type and explain which chart types to avoid.
Design a Clear Chart 
Turn this dataset summary into a clear chart plan: [paste summary]. Include title, axes, labels, colors, and annotations.
Create a Dashboard Visual Set 
Design a dashboard visual set for [audience] using these metrics: [metrics]. Recommend chart types, layout order, and color rules.
Audit a Visualization 
Review this chart plan for clarity and possible misleading choices: [describe chart]. Identify issues and provide a revised version.

Best Practices

  • Start with the reader question, then choose the chart type that answers it directly.
  • Use one main highlight color and keep supporting data visually quiet.
  • Write titles that state the insight instead of naming the chart type.

Avoid

  • Using pie charts for many categories or values that need precise comparison.
  • Truncating bar chart axes in ways that exaggerate differences.
  • Adding decorative elements that do not help readers understand the data.

Frequently Asked Questions

Does this skill generate charts?
It provides chart recipes and examples that can generate charts through the inference.sh CLI when users choose to run them.
Which chart types does it cover?
It covers line charts, bar charts, heatmaps, KPI cards, scatter plots, histograms, treemaps, and several chart alternatives.
Can it help with dashboard design?
Yes. It can recommend chart types, ordering, titles, labels, colors, and annotations for dashboard metrics.
Does it support accessibility?
Yes. It includes colorblind-safe palette guidance and recommends labels, contrast, and readable text sizes.
Does it require external services?
The guidance is readable without services, but executable examples use the inference.sh CLI and external apps.
Is it safe for sensitive data?
Do not send sensitive data to external chart execution services unless your organization has approved that workflow.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/inference-sh-9/skills/tree/main/skills/data-visualization/

Ref

a06681402992ceae98ba04d54cfd4ab004862696

Maintenance freshness

7/18/2026

Usage

11 downloads · 133 views

File structure

📄 SKILL.md

More from inference-sh-9

View all

Related Skills

View all