Skip to content

feat(skills): add baoyu-infographic skill — 21 layouts × 21 styles - #9901

Closed
teknium1 wants to merge 3 commits into
mainfrom
hermes/hermes-9a00cfa2
Closed

feat(skills): add baoyu-infographic skill — 21 layouts × 21 styles#9901
teknium1 wants to merge 3 commits into
mainfrom
hermes/hermes-9a00cfa2

Conversation

@teknium1

@teknium1 teknium1 commented Apr 14, 2026

Copy link
Copy Markdown
Contributor

Summary

Port of baoyu-infographic from JimLiu/baoyu-skills (v1.56.1) adapted for Hermes Agent.

Permission granted by 宝玉 (Jim Liu) to port and adapt his skills into Hermes Agent, with the agreement to preserve name/author/version/GitHub URL attribution.

What this skill does

Generates professional infographics by combining:

  • 21 layout types (bento-grid, timeline, comparison, hierarchy, funnel, dashboard, etc.)
  • 21 visual styles (craft-handmade, cyberpunk-neon, pixel-art, technical-schematic, etc.)

The skill guides the agent through a 7-step workflow: content analysis → structured content → combination recommendation → user confirmation → prompt assembly → image generation → summary.

Adaptations from upstream

Area Original (OpenClaw) Adapted (Hermes)
Metadata openclaw namespace hermes namespace
Triggers /baoyu-infographic slash command Natural language matching
Config EXTEND.md file system Removed (not part of Hermes infra)
User prompts AskUserQuestion (batched) clarify tool (one at a time)
Image gen baoyu-imagine / external image_generate tool
Platforms Linux/macOS/Windows/WSL Linux/macOS only
File ops bash commands Hermes file tools

Files

  • 1 SKILL.md (adapted workflow)
  • 3 core reference files (analysis framework, base prompt, structured content template) — unchanged from upstream
  • 21 layout definitions — unchanged from upstream
  • 21 style definitions — unchanged from upstream

Total: 46 files, ~216KB

Attribution

author: 宝玉 (JimLiu)
version: 1.56.1
homepage: https://github.com/JimLiu/baoyu-skills#baoyu-infographic

Demo skill for review

This is the first skill being ported as a demo conversion. Jim requested to review the diff so he can potentially sync changes to his repo.

haileymarshall and others added 2 commits April 13, 2026 20:31
@haileymarshall @teknium1
feat(skills): add fitness-nutrition skill to optional-skills
7354a2d 
Cherry-picked from PR #9177 by @haileymarshall.

Adds a fitness and nutrition skill for gym-goers and health-conscious users:
- Exercise search via wger API (690+ exercises, free, no auth)
- Nutrition lookup via USDA FoodData Central (380K+ foods, DEMO_KEY fallback)
- Offline body composition calculators (BMI, TDEE, 1RM, macros, body fat %)
- Pure stdlib Python, no pip dependencies

Changes from original PR:
- Moved from skills/ to optional-skills/health/ (correct location)
- Fixed BMR formula in FORMULAS.md (removed confusing -5+10, now just +5)
- Fixed author attribution to match PR submitter
- Marked USDA_API_KEY as optional (DEMO_KEY works without signup)

Also adds optional env var support to the skill readiness checker:
- New 'optional: true' field in required_environment_variables entries
- Optional vars are preserved in metadata but don't block skill readiness
- Optional vars skip the CLI capture prompt flow
- Skills with only optional missing vars show as 'available' not 'setup_needed'
@teknium1 宝玉 (JimLiu)
feat(skills): add baoyu-infographic skill — 21 layouts × 21 styles
045bcb3 
Port of baoyu-infographic from JimLiu/baoyu-skills (v1.56.1) adapted
for Hermes Agent's tool ecosystem.

Adaptations from upstream:
- Frontmatter: openclaw metadata → hermes metadata
- Usage: slash command syntax → natural language triggers
- Removed EXTEND.md config system (not part of Hermes infrastructure)
- AskUserQuestion → clarify tool (one question at a time)
- Image generation → image_generate tool
- Removed Windows-specific paths
- Simplified file operations to use Hermes file tools
- All 45 reference files (layouts, styles, templates) preserved intact

Attribution preserved per agreement with 宝玉 (Jim Liu):
- author, version, GitHub homepage URL in frontmatter

Co-authored-by: 宝玉 (JimLiu) <baoyu@example.com>
@github-actions

github-actions Bot commented Apr 14, 2026

Copy link
Copy Markdown
Contributor

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: exec() or eval() usage

Dynamic code execution can hide malicious behavior, especially when combined with base64 or network fetches.

Matches (first 20):

15524:+        result = self._exec(cmd, timeout=60)

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/memory_setup.py
hermes_cli/setup.py

⚠️ WARNING: CI/CD workflow files modified

Changes to workflow files can alter build pipelines, inject steps, or modify permissions. Verify no unauthorized actions or secrets access were added.

Files:

.github/workflows/contributor-check.yml
.github/workflows/deploy-site.yml
.github/workflows/docker-publish.yml
.github/workflows/docs-site-checks.yml
.github/workflows/nix.yml
.github/workflows/skills-index.yml
.github/workflows/supply-chain-audit.yml
.github/workflows/tests.yml

⚠️ WARNING: Dependency manifest files modified

Changes to dependency files can introduce new packages or change version pins. Verify all dependency changes are intentional and from trusted sources.

Files:

package.json
pyproject.toml
scripts/whatsapp-bridge/package.json
web/package.json

⚠️ WARNING: GitHub Actions with mutable version tags

Actions should be pinned to full commit SHAs (not @v4, @v5). Mutable tags can be retargeted silently if a maintainer account is compromised.

Matches:

214:+      - uses: actions/checkout@v4
217:+      - uses: actions/setup-node@v4
224:+      - uses: actions/setup-python@v5
239:+        uses: actions/upload-pages-artifact@v3
246:+        uses: actions/deploy-pages@v4
256:+        uses: actions/checkout@v4
262:+        uses: docker/setup-qemu-action@v3
266:+        uses: docker/setup-buildx-action@v3
273:+        uses: docker/build-push-action@v6
282:+        uses: docker/login-action@v3

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.

JimLiu
JimLiu approved these changes Apr 15, 2026
View reviewed changes

@JimLiu JimLiu left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@teknium1
docs: add PORT_NOTES.md for baoyu-infographic
cc7102c 
Documents what changed from upstream and how to sync future updates.
@github-actions

github-actions Bot commented Apr 15, 2026

Copy link
Copy Markdown
Contributor

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: exec() or eval() usage

Dynamic code execution can hide malicious behavior, especially when combined with base64 or network fetches.

Matches (first 20):

15573:+        result = self._exec(cmd, timeout=60)

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/memory_setup.py
hermes_cli/setup.py

⚠️ WARNING: CI/CD workflow files modified

Changes to workflow files can alter build pipelines, inject steps, or modify permissions. Verify no unauthorized actions or secrets access were added.

Files:

.github/workflows/contributor-check.yml
.github/workflows/deploy-site.yml
.github/workflows/docker-publish.yml
.github/workflows/docs-site-checks.yml
.github/workflows/nix.yml
.github/workflows/skills-index.yml
.github/workflows/supply-chain-audit.yml
.github/workflows/tests.yml

⚠️ WARNING: Dependency manifest files modified

Changes to dependency files can introduce new packages or change version pins. Verify all dependency changes are intentional and from trusted sources.

Files:

package.json
pyproject.toml
scripts/whatsapp-bridge/package.json
web/package.json

⚠️ WARNING: GitHub Actions with mutable version tags

Actions should be pinned to full commit SHAs (not @v4, @v5). Mutable tags can be retargeted silently if a maintainer account is compromised.

Matches:

214:+      - uses: actions/checkout@v4
217:+      - uses: actions/setup-node@v4
224:+      - uses: actions/setup-python@v5
239:+        uses: actions/upload-pages-artifact@v3
246:+        uses: actions/deploy-pages@v4
256:+        uses: actions/checkout@v4
262:+        uses: docker/setup-qemu-action@v3
266:+        uses: docker/setup-buildx-action@v3
273:+        uses: docker/build-push-action@v6
282:+        uses: docker/login-action@v3

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.

@teknium1 teknium1 mentioned this pull request Apr 18, 2026
Merged
@teknium1

teknium1 commented Apr 18, 2026

Copy link
Copy Markdown
Contributor Author

Landed via salvage PR #12254 on current main.

The original branch was 673 commits behind main and would have silently reverted three merged PRs to tools/skills_tool.py (#10285, #10587, and b21b3bf — including the _INJECTION_PATTERNS prompt-injection guard and the _serve_plugin_skill path). It also bundled a redundant fitness-nutrition cherry-pick that was already on main as f0b353b.

#12254 cherry-picks only the two baoyu commits onto current main with authorship preserved per-commit, and corrects Jim's Co-authored-by trailer from the placeholder baoyu@example.com to junminliu@gmail.com so GitHub links the attribution to @JimLiu.

Feat commit on main: 65c0a30a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@JimLiu JimLiu JimLiu approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@teknium1 @JimLiu @haileymarshall