# Send Capability Graph Mapper to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "capability-graph-mapper", "name": "Capability Graph Mapper", "source": "tencent", "type": "skill", "category": "AI 智能", "sourceUrl": "https://clawhub.ai/andyxinweiminicloud/capability-graph-mapper", "canonicalUrl": "https://clawhub.ai/andyxinweiminicloud/capability-graph-mapper", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/capability-graph-mapper", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=capability-graph-mapper", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "slug": "capability-graph-mapper", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-30T06:09:29.277Z", "expiresAt": "2026-05-07T06:09:29.277Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=capability-graph-mapper", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=capability-graph-mapper", "contentDisposition": "attachment; filename=\"capability-graph-mapper-1.0.0.zip\"", "redirectLocation": null, "bodySnippet": null, "slug": "capability-graph-mapper" }, "scope": "item", "summary": "Item download looks usable.", "detail": "Yavira can redirect you to the upstream package for this item.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/capability-graph-mapper" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/capability-graph-mapper", "downloadUrl": "https://openagent3.xyz/downloads/capability-graph-mapper", "agentUrl": "https://openagent3.xyz/skills/capability-graph-mapper/agent", "manifestUrl": "https://openagent3.xyz/skills/capability-graph-mapper/agent.json", "briefUrl": "https://openagent3.xyz/skills/capability-graph-mapper/agent.md" } } ``` ## Documentation ### Your Agent Has 12 Skills — Do You Know What They Can Do Together? Helps map composite permission surfaces across skill dependency chains, revealing emergent capabilities that no single skill declares. ### Problem Individual skill permissions look reasonable in isolation. A file-reader skill reads files. An HTTP client skill sends requests. A JSON parser skill transforms data. Each one passes a security review on its own. But install all three in the same agent, and you've built a data exfiltration pipeline — read sensitive files, parse out credentials, send them to an external endpoint. Nobody approved that combination. Nobody even noticed it exists. In traditional software, tools like npm audit map dependency trees and flag known vulnerabilities. In agent ecosystems, the risk isn't in individual dependencies — it's in the composite capability surface that emerges when skills combine. There is no npm audit for emergent agent capabilities. ### What This Maps This mapper traces the permission graph across an agent's installed skills: Permission enumeration — For each skill, extract declared capabilities: file access, network requests, shell execution, environment variable reads, credential access Pairwise composition — For every pair of skills, check if their combined capabilities create a new emergent capability (e.g., read + send = exfiltrate) Transitive chains — Trace three-hop and deeper composition paths where skill A feeds skill B feeds skill C, creating capabilities invisible at any single hop Privilege surface score — Compute a single metric: how many distinct dangerous capability combinations exist in this agent's skill set? Delta analysis — When a new skill is added, show what new composite capabilities it introduces to the existing set ### How to Use Input: Provide one of: A list of skill names/slugs installed in an agent A skill manifest or configuration file A single skill to evaluate against a known agent profile Output: A capability graph report containing: Permission matrix (skills × capabilities) Emergent capability combinations flagged as risky Privilege surface score (0-100) Recommendation: which skill combinations to review manually Delta report if evaluating a new addition ### Example Input: Map capability surface for agent with skills: log-analyzer, http-poster, env-reader, markdown-formatter 🕸️ CAPABILITY GRAPH — 3 emergent risks detected Permission matrix: read_files send_http read_env exec_shell write_files log-analyzer ✓ http-poster ✓ env-reader ✓ ✓ markdown-formatter ✓ ✓ Emergent capability combinations: ⚠️ RISK 1: Data exfiltration path env-reader (read .env) → http-poster (send HTTP) Combined: Can read credentials and transmit them externally Severity: HIGH ⚠️ RISK 2: Sensitive file relay log-analyzer (read logs) → http-poster (send HTTP) Combined: Can read application logs and send contents externally Severity: MODERATE ⚠️ RISK 3: Three-hop chain env-reader (read secrets) → markdown-formatter (transform data) → http-poster (send HTTP) Combined: Read, obfuscate, and exfiltrate in one pipeline Severity: HIGH Privilege surface score: 67/100 (elevated) Recommendation: - Review whether http-poster needs to coexist with env-reader - Consider sandboxing env-reader's file access scope - The markdown-formatter → http-poster chain enables obfuscation; audit what markdown-formatter can output ### Related Tools blast-radius-estimator — estimates downstream impact when a skill turns malicious; capability-graph-mapper helps quantify what a compromised skill could do permission-creep-scanner — checks individual skills for over-permission; this mapper checks what happens when multiple over-permissioned skills combine supply-chain-poison-detector — detects poisoned individual skills; this mapper shows why a poisoned skill with network access is more dangerous in agents that also have file-read skills ### Limitations Capability graph mapping depends on accurately extracting each skill's actual permissions, which may not always match declared permissions. Skills that dynamically request capabilities at runtime may not be fully captured through static analysis. The composition risk model uses known dangerous patterns (read+send, parse+execute) but novel attack chains may not be in the pattern library. This tool helps surface emergent risks for human review — it does not guarantee detection of all possible capability combinations. Privilege surface scores are relative, not absolute measures of risk. ## Trust - Source: tencent - Verification: Indexed source record - Publisher: andyxinweiminicloud - Version: 1.0.0 ## Source health - Status: healthy - Item download looks usable. - Yavira can redirect you to the upstream package for this item. - Health scope: item - Reason: direct_download_ok - Checked at: 2026-04-30T06:09:29.277Z - Expires at: 2026-05-07T06:09:29.277Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/capability-graph-mapper) - [Send to Agent page](https://openagent3.xyz/skills/capability-graph-mapper/agent) - [JSON manifest](https://openagent3.xyz/skills/capability-graph-mapper/agent.json) - [Markdown brief](https://openagent3.xyz/skills/capability-graph-mapper/agent.md) - [Download page](https://openagent3.xyz/downloads/capability-graph-mapper)