Borrowing it
Nothing to install: this file belongs to GarryWhite109909/xmind-mcp-server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/GarryWhite109909/xmind-mcp-server/main/.claude/skills/xmind-format/SKILL.mdgit clone --depth 1 https://github.com/GarryWhite109909/xmind-mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/garrywhite109909/xmind-mcp-server/xmind-format)<a href="https://agentmods.dev/skills/garrywhite109909/xmind-mcp-server/xmind-format"><img src="https://agentmods.dev/badge/skills/garrywhite109909/xmind-mcp-server/xmind-format/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/garrywhite109909/xmind-mcp-server/xmind-format"><img src="https://agentmods.dev/badge/skills/garrywhite109909/xmind-mcp-server/xmind-format.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.01115 |
| Opus 5.5 | $0.00021 | $0.00446 |
| Sonnet 5.5 | $0.00010 | $0.00223 |
| Haiku 4.5 | $0.00005 | $0.00112 |
Grade A, and why
xmind-format scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 111 lines — stays where its author put it; the contents beside it link to each section on GitHub.
XMind 文件格式与安全写回
先看事实
.xmind 是 ZIP,新版(XMind Zen / 2020+)以 content.json 为准:
content.json 主题树(唯一真相)
metadata.json dataStructureVersion / layoutEngineVersion / creator
manifest.json file-entries 清单
content.xml 旧版兼容占位(XMind 26 仍会带)
cache.json 缓存占位
attachments/ 图片/附件(可被 xap: 引用)
resources/ 本工具插入图片时使用
Thumbnails/ 保存时生成的整图缩略图
图片引用:"src": "xap:resources/xxx.png" → zip 内 resources/xxx.png。
也兼容 data:image/...;base64,...。
节点树:
{
"id": "sheet-id",
"title": "工作表",
"rootTopic": {
"id": "root",
"title": "中心主题",
"children": {
"attached": [],
"detached": [],
"summary": [],
"callout": []
},
"notes": {"text": "..."},
"markers": [{"markerId": "priority-1"}],
"labels": ["标签"],
"image": {"src": "xap:resources/x.png"},
"style": {"id": "...", "properties": {...}},
"summaries": [{"id": "...", "range": "(0,2)", "topicId": "..."}],
"boundaries": [{"id": "...", "range": "(0,1)"}]
},
"relationships": [{"end1Id": "...", "end2Id": "..."}],
"theme": {...}
}
读写流程
读:parse_xmind(path) → XMindFile(sheets / raw_content / _topic_index)。
改:只改 writer.xm.raw_content 里的 dict,然后调用
self.xm.refresh_from_raw() 重建节点树和 ID 索引。
存:writer.save(output_path);不要自己写 zip。
save() 已经负责:
- 覆盖前备份到
~/.xmind-mcp/backups/(每个文件保留 20 份); - 磁盘摘要与
xm.source_digest不一致时抛FileChangedError; - 移除过期
Thumbnails/thumbnail.png; - 补
metadata.json/content.xml/cache.json,同步manifest.json; - 临时文件 +
os.replace原子替换。
官方校验硬规则
非根主题不能带 class: "topic";每个 style 必须有 id;
markers 必须是 [{"markerId": "..."}],不能是字符串数组。
这些规则由 tests/test_golden.py 和官方 CLI 共同守住。
如果本机装有 XMind 官方 CLI:
xmind auth status
xmind validate path/to/file.xmind
CLI 要求登录,validate 也不例外;没有登录时先 xmind auth login cn
(或 global),回调等待约 180 秒。
结构变更的连锁影响
children.attached顺序变化(插入 / 删除 / 移动)会让summaries/boundaries的字符串区间"(i,j)"错位: 必须先记录旧 ID 列表,再调用_remap_visual_ranges(parent, old_ids)。- 删除子树时用
topic_ids_in_subtree(),再_cleanup_dangling_refs()清理 relationships / summaries / boundaries。 - 移动/复制节点前用
_is_descendant()阻止移到自己或后代下。 summary/callout不是普通主题,不能挂子节点、不能移动/复制。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 111 lines · 52 tokens per session scan A da58a3e1047b
xmind-format is a skill published in the GitHub repository GarryWhite109909/xmind-mcp-server (0 stars, last pushed 2d ago), licensed MIT. It adds 52 tokens to every session and 1,115 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-09.
xmind-format compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| xmind-formatGarryWhite109909/xmind-mcp-server | Skill | 0 | 2d ago | MIT | A | 52 | Claude Code |
| orbit-notionnexu-io/open-design | Skill | 107k | today | Apache-2.0 | A | 117 | Claude Code, Codex |
| instrument-data-to-allotropeanthropics/knowledge-work-plugins | Skill | 35k | 3d ago | Apache-2.0 | A | 123 | Claude Code |
| apify-youtube-transcript-scrapersickn33/agentic-awesome-skills | Skill | 49k | today | MIT | A | 48 | Claude Code |
| legal-holdanthropics/claude-for-legal | Skill | 10.0k | 2d ago | Apache-2.0 | A | 68 | Claude Code |
| report-to-pdfasgeirtj/system_prompts_leaks | Skill | 71k | 2d ago | CC0-1.0 | A | 17 | Claude Code, Codex |
| artifact-template-minimal-letterheadasgeirtj/system_prompts_leaks | Skill | 71k | 2d ago | CC0-1.0 | A | 54 | Claude Code, Codex |