المهارات higgsfield-youtube-thumbnail

📦

higgsfield-youtube-thumbnail

Name: higgsfield-youtube-thumbnail
Author: higgsfield-ai

v0.12.0 مراجعة المحتوى r1 حرج ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات

Create High-Impact YouTube Thumbnails

Strong thumbnails require clear concepts, readable composition, and truthful visual promises. This skill generates controlled Higgsfield variants and supports focused edits and overlays.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

لا تثبّت هذا Skill تلقائيًا.

تتطلب السياسة المعتمدة مراجعة المشغّل قبل أي إجراء تثبيت.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "higgsfield-youtube-thumbnail" from https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail.md and its manifest at https://skillstore.io/api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/higgsfield-ai-higgsfield-youtube-thumbnail.md manifest موقَّع GET /api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/manifest lockfile موقَّع GET /api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/lockfile

اختبرها

جارٍ استخدام "higgsfield-youtube-thumbnail". A 16:9 thumbnail for a video about restoring a damaged camera, without text.

النتيجة المتوقعة:

Restoration reveal: a close-up creator holds the damaged camera beside the restored result, with bright separation and no readable text.

جارٍ استخدام "higgsfield-youtube-thumbnail". Four Shorts cover concepts about completing a 30-day fitness challenge.

النتيجة المتوقعة:

Day 30 reveal: determined portrait with a clear final-day badge.
Progression: three vertical stages from day one to day thirty.
Scale contrast: small starting silhouette beside the stronger final pose.
Challenge moment: exhausted expression during the final workout.

جارٍ استخدام "higgsfield-youtube-thumbnail". Add the headline "FINAL TEST" to the selected clean thumbnail.

النتيجة المتوقعة:

Neon Lime overlay: FINAL TEST appears in the free lower quarter, away from the face, with a thick dark stroke.

التدقيق الأمني

حرج

v1 • ١٠‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Most static findings are false positives from Markdown backticks, JavaScript syntax, or visual-design prose. The remote installer uses an unpinned curl-to-shell command, while local references and Google Fonts create disclosed third-party transfers. No prompt injection or covert exfiltration intent was found.

الملفات التي تم فحصها

519

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (2)

حرج

SKILL.md:20

Pipe to shell pattern

curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh

The bootstrap command pipes a remotely downloaded, mutable script directly into sh. A compromised repository or changed script would gain immediate shell execution.

متوسط

SKILL.md:70-76 SKILL.md:165

Automatic Third-Party Upload of Local Images

Face photos and logos supplied as local paths are automatically uploaded to Higgsfield. These potentially sensitive assets leave the local environment.

The skill explicitly states that local paths are auto-uploaded and describes retrying a downloaded image as an uploaded media input.

عناصر مراجعة القدرات (3)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

مرتفع

SKILL.md:20

Hardcoded URL

curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh

The URL points to a mutable installation script on a remote GitHub branch. No commit hash or integrity check pins the code that will execute.

منخفض

references/text-overlay-bake.md:39

Hardcoded URL

The HTML preview loads Anton from Google Fonts, creating a real third-party network request. This is expected functionality but exposes the user's IP address to the font provider.

منخفض

references/text-overlay-bake.md:140

Hardcoded URL

fontLink.href = 'https://fonts.googleapis.com/css2?family=Anton&display=swap';

The canvas workflow dynamically loads Anton from Google Fonts before rendering. This expected dependency creates a third-party request and a minor privacy and availability risk.

عوامل الخطر

⚙️ الأوامر الخارجية (40)

🌐 الوصول إلى الشبكة (3)

references/text-overlay-bake.md:39 references/text-overlay-bake.md:140 SKILL.md:20

📁 الوصول إلى نظام الملفات (1)

references/text-overlay-bake.md:171

الأنماط المكتشفة

Pipe to shell pattern

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-youtube-thumbnail/security.svg)](https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-youtube-thumbnail/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/higgsfield-ai-higgsfield-youtube-thumbnail.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

higgsfield-ai. (2026). higgsfield-youtube-thumbnail security audit report (audit version 1) [Author version 0.12.0]. Skillstore. https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1

اقتباس BibTeX

@techreport{higgsfield-ai-higgsfield-ai-higgsfield-youtube-thumbnail-2026,
  author = {higgsfield-ai},
  title = {higgsfield-youtube-thumbnail security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1},
  note = {Author version 0.12.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "higgsfield-youtube-thumbnail security audit report (audit version 1)"
version: "0.12.0"
type: report
authors:
  - name: "higgsfield-ai"
date-released: "2026-08-10"
url: "https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1"
identifiers:
  - type: other
    value: "skillstore:higgsfield-ai-higgsfield-youtube-thumbnail:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: منخفض

الهندسة المعمارية

100

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Launch a YouTube Video

Create several truthful 16:9 thumbnail concepts with clear focal subjects and strong mobile readability.

Prepare Vertical Covers

Generate 9:16 Shorts covers or 4:5 Instagram covers while keeping faces in readable positions.

Maintain Brand Consistency

Use face references, logos, controlled variants, and focused edits across a recurring video series.

جرّب هذه الموجّهات

Create a Basic Thumbnail

Create a truthful 16:9 YouTube thumbnail for a video titled "[title]" with one clear subject and no text.

Create Concept Variants

Create four distinct 16:9 concepts for "[topic]" using [face image], while preserving identity and avoiding unsupported claims.

Create a Vertical Cover

Create a 9:16 Shorts cover for "[topic]" with the face in the upper two-thirds and a two-word overlay.

Direct a Branded Variant Set

Create four branded variants for "[topic]" using [face images] and [logo], varying only concept, expression, and camera direction.

أفضل الممارسات

Provide the exact video promise, required scene details, target ratio, and approved reference images.
Keep one focal subject and verify that the concept remains readable near 120 pixels wide.
Review every result for truthful claims, identity accuracy, stray text, watermarks, and exact headline spelling.

تجنب

Do not imitate a reference thumbnail's identity or exact composition.
Do not request unsupported claims, invented statistics, false screenshots, or misleading outcomes.
Do not combine many subjects, props, labels, and effects into one crowded thumbnail.