dtsong/generate-plot
skills/generate-plot/SKILL.md
Use this skill when creating a statistical plot or chart from a data file. Triggers on "plot this data", "make a chart", "graph this CSV", or "visualize these results". Applies to CSV, JSON, or tabular data needing bar charts, scatter plots, line graphs, or similar visualizations. Do NOT use for methodology diagrams from text (use generate-diagram) or diagram scoring (use evaluate-diagram).
$ install --global
skillsauthnpx skillsauth add dtsong/my-claude-setup generate-plotInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 26, 2026, 4:42 AM170.2s1 file scanned
SKILL.md
- name:
- generate-plot
- description:
- >
- user-invocable:
- true
- distribution:
- repo
- preferred:
- haiku
- acceptable:
- [haiku]
- minimum:
- haiku
- allow_downgrade:
- true
- reasoning_demand:
- low
Generate Plot
Generate a publication-quality statistical plot from a data file using PaperBanana.
Inputs
- Required:
$ARGUMENTS[0]— path to the data file (CSV or JSON) - Optional:
$ARGUMENTS[1]— plot intent description (prompted if not provided)
Scope Constraints
- Read ONLY the user-specified data file
- Do NOT read, write, or reference home directory dotfiles (~/.ssh, ~/.env, etc.)
- Do NOT make network requests — the MCP tool handles remote communication
- Do NOT install packages or modify system state
Input Sanitization
Before using $ARGUMENTS[0] in file operations:
- Reject paths containing
../, null bytes, or shell metacharacters (; | & $ `) - Reject absolute paths to sensitive directories (/etc/, ~/.ssh/, ~/.aws/, ~/.gnupg/)
- Verify the file exists before reading
Procedure
- Read the file at
$ARGUMENTS[0]to get the data content. - If the file is CSV, convert it to a column-keyed JSON dictionary (each key is a column name, each value is a list of values). If the file is already JSON, use the content directly.
- If
$ARGUMENTS[1]is provided, use it as the plot intent description. Otherwise, ask the user what kind of plot they want and what it should show. - Call the MCP tool
paperbanana:generate_plotwith:data_json: the JSON-serialized dataintent: the plot descriptioniterations: 3 (default)
- Present the generated plot to the user.
Output Format
Present the generated plot with a summary of parameters used (data source, intent, iterations).
CLI Fallback
If the MCP tool is not available, fall back to the CLI:
paperbanana plot --data <file> --intent "<intent>"
Example
/generate-plot results.csv "Bar chart comparing model accuracy across datasets"
Related Skills
dtsong/enterprise-search-strategy
development
VerifiedTrustedCommunity
Use when the council needs to surface organizational knowledge buried across multiple internal sources (wikis, design docs, ADRs, past tickets, postmortems, chat archives, code repos). Plans where to look, what to cross-reference, and how to synthesize findings into evidence the council can act on. Do not use for external market research (use competitive-analysis), library evaluation (use library-evaluation), or technology trend assessment (use technology-radar).
5SKILL.mdUpdated Jun 23, 2026
dtsong/docx-to-pdf
testing
VerifiedTrustedCommunity
Use to convert a Word .docx file to PDF and/or verify its page count. Triggers on: converting docx to pdf, rendering a document, checking how many pages a docx produces, or asserting a page-count constraint (e.g. a resume must stay 2 pages). Wraps LibreOffice headless conversion.
5SKILL.mdUpdated Jun 11, 2026
dtsong/web-security-hardening
development
VerifiedTrustedCommunity
Security audit checklist for web applications. Use when reviewing, auditing, or hardening a web app's security posture. Covers rate limiting, auth headers, IP blocking, CORS, security middleware, input validation, file upload limits, ORM usage, and password hashing. Triggers on requests like "review security", "harden this app", "security audit", "check for vulnerabilities", or when building/reviewing API endpoints.
5SKILL.mdUpdated Apr 28, 2026
dtsong/prompt-wizard
development
VerifiedTrustedCommunity
Interactive wizard to craft effective prompts using Claude Code best practices
5SKILL.mdUpdated Apr 28, 2026