flint-chart: Skill for Claude Code

.github/extensions/flint-chart/skills/flint-chart-author/SKILL.md

flint-chart-author is a skill for Claude Code, Codex from microsoft/flint-chart. It costs 81 tokens per session (13,342 once invoked), scanned A, original, MIT.

A skill for creating chart specifications with flint-chart, a JavaScript charting library. It maps data fields to visual elements and can prepare charts for supported rendering systems.

In plain words
What is it for?
Use it to author, transform, validate, or render charts, including filtering, grouping, joining, pivoting, and reshaping data before chart creation.
Why use it?
It helps turn a table of data into a structured chart definition while keeping data preparation separate from chart styling.

Skill for Claude CodeCodex ✓ vendor

Written for no agent in particular: nothing here depends on one.

This is microsoft/flint-chart's own configuration. It tells Claude Code and Codex how to work on flint-chart itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything flint-chart configures →

About the project

Flint is a visualization language that turns compact, human-editable chart descriptions into charts without requiring an agent to specify every layout detail. Its library produces output for formats including Vega-Lite, ECharts, Chart.js, Plotly, and editable Excel charts, while its MCP server lets agents create, validate, and render visualizations. The catalogue skills, agent, and MCP integration help coding agents use Flint.

microsoft/flint-chart · 4,545 stars · on GitHub · microsoft.github.io

Reuse

Borrowing it

Nothing to install: this file belongs to microsoft/flint-chart. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/microsoft/flint-chart/main/.github/extensions/flint-chart/skills/flint-chart-author/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/microsoft/flint-chart

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for flint-chart-author

README.md
[![agentmods](https://agentmods.dev/badge/skills/microsoft/flint-chart/flint-chart-author/github.svg)](https://agentmods.dev/skills/microsoft/flint-chart/flint-chart-author)
Your own site
<a href="https://agentmods.dev/skills/microsoft/flint-chart/flint-chart-author"><img src="https://agentmods.dev/badge/skills/microsoft/flint-chart/flint-chart-author/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for flint-chart-author

Your own site · 80×15
<a href="https://agentmods.dev/skills/microsoft/flint-chart/flint-chart-author"><img src="https://agentmods.dev/badge/skills/microsoft/flint-chart/flint-chart-author.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 81 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 13,342 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium MCP Rug Pull · line 56
    npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
    Fix: Pin the version: npx @scope/[email protected]
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00081 $0.13342
Opus 5.5 $0.00032 $0.05337
Sonnet 5.5 $0.00016 $0.02668
Haiku 4.5 $0.00008 $0.01334

Measured 16d ago against content hash 0c2600fe4672, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

flint-chart-author scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 16d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/extensions/flint-chart/skills/flint-chart-author/SKILL.md · 866 lines

How it starts

The opening of the file, as written. The whole thing — 866 lines — stays where its author put it; the contents beside it link to each section on GitHub.

flint-chart: authoring and using a chart spec

What you produce (and what you do NOT)

Your output is the spec: the chart_spec and semantic_types of a ChartAssemblyInput. You reference data columns by name. The host passes the resulting input to assembleVegaLite, assembleECharts, or assembleChartjs to get a backend spec.

You write the input spec, not the output spec. And critically:

  • DO emit chart_spec (chart type, channel→field mapping, properties) and semantic_types (field → semantic type).
  • DO add interaction_spec when the user asks for behaviour (highlight, legend toggle, pan and zoom, brush), asks for an interactive chart, or the session's goal is to explore the data. List presets by name; see "Interactions", and load the flint-interaction-author skill for an intent, an interactive chart with nothing named, or a combination.
  • Reference columns by name. How data itself gets bound depends on the situation — a URL, a host-side variable, or embedded rows (see "How data gets bound"). Embedding is fine for small tables; just don't re-serialize a large dataset by hand, since that risks truncation and silent value corruption and wastes tokens.
  • Transform data before Flint. If the requested chart needs aggregation, filtering, joins, pivots, derived columns, or long/wide reshaping beyond Flint's built-in static-series fold, use a coding, notebook, SQL, or data tool first. Then author the Flint spec against the transformed table.
  • Style after Flint, only when needed. Author structure in Flint. For a presentation tweak Flint does not express (a reference line, annotation, or shaded band), use the Vega-Lite escape hatch — see "Post-Flint style customization". Never feed edited Vega-Lite JSON back to render_chart.

When the user wants more than a spec

First decide which workflow the user is asking for:

  • Spec authoring only: return a ChartAssemblyInput or its semantic_types + chart_spec pieces. Do not install packages or write renderer code unless asked.
  • MCP chart output: if Flint MCP tools are available, default to validate_chart then show whenever the user asks to see a chart. validate_chart checks the spec and returns a report without drawing; fix what it asks in the spec, then call show({ "chart": … }) once with the whole spec, which opens an interactive, live-rendered card with a customization panel. The server keeps nothing between calls: the spec in the conversation is the chart. Only fall back to render_chart (PNG/SVG) when the host has no App UI support or the user explicitly wants a static image. Use compile_chart when the user wants backend-native JSON, and list_chart_types when you need the supported chart catalog.
  • DO pass updates beside the input to validate_chart and show when the user asks the chart to open in a state: rows to stand out, a note on a mark, a framed range. It is a list of ChartUpdate layers, state not behaviour; the shapes are in flint://interaction-skill under "Update the chart". To change a chart in a later turn, change its spec or updates and call show again: a new card shows it, earlier cards stay as they were. The reader's edits in the card's panel live on that card; its context gives the chart_spec that keeps them, so pass it unless the user asked for something else.
  • DO pass view: "table" to show when the user wants to see a chart's numbers: the card opens on the table of the rows the chart draws, and the reader can switch to the chart. When the user wants records listed and no chart at all, use chartType: "Table" instead.
  • Project integration, only when the user asks for code: add Flint to an app, notebook, script, or agentic product, install/import the library, and call an assembler in code. Keep the same ChartAssemblyInput contract, then let the host render the backend result.

Read the full file on GitHub · 866 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 16d ago Changed · +295 lines 0c2600fe4672
  2. 2mo ago First seen · 571 lines · 81 tokens per session scan A 032a2735c683

Subscribe to this mod's changes

flint-chart-author is a skill published in the GitHub repository microsoft/flint-chart (4,545 stars, last pushed 3d ago), licensed MIT. It adds 81 tokens to every session and 13,342 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

flint-chart-author compared with skills from other repositories

flint-chart-author next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
flint-chart-authormicrosoft/flint-chartSkill4.5k3d agoMITA81Claude Code, Codex
build-power-bi-reportjonathan-pap/powerbi-report-mcpSkill215mo agoMITA91Claude Code
wireframe-power-bi-pagejonathan-pap/powerbi-report-mcpSkill215mo agoMITA81Claude Code
design-power-bi-reportjonathan-pap/powerbi-report-mcpSkill215mo agoMITA67Claude Code
opik-diagnosecomet-ml/opik-mcpSkill2259d agoApache-2.0A187Claude Code
ue-mcp-epic-routingdb-lyon/ue-mcpSkill476yesterdayMITA81Claude Code, Codex
qa-knowledgegriddynamics/rosettaSkill370todayApache-2.0A32Claude Code, Codex