📦

explain-interface

Name: explain-interface
Author: jakubkrehel

مراجعة المحتوى r1 مخاطر عالية ⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات

Explain How a Web Interface Was Built

Web interfaces hide their implementation behind compiled styles and runtime behavior. This skill gathers evidence and explains the design system or visual effect.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

توقف واطلب التأكيد قبل التثبيت.

راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "explain-interface" from https://skillstore.io/skills/jakubkrehel-explain-interface.md and its manifest at https://skillstore.io/api/skills/jakubkrehel-explain-interface/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/jakubkrehel-explain-interface.md manifest موقَّع GET /api/skills/jakubkrehel-explain-interface/manifest lockfile موقَّع GET /api/skills/jakubkrehel-explain-interface/lockfile

اختبرها

جارٍ استخدام "explain-interface". Explain the soft gradient behind the hero on the supplied page.

النتيجة المتوقعة:

Measured: A wide pseudo-element sits behind the hero and extends beyond the viewport.
Measured: A low-opacity multi-stop gradient is softened with a large blur.
Inferred: The oversize prevents blurred edges from appearing inside the viewport.

جارٍ استخدام "explain-interface". How is this site built?

النتيجة المتوقعة:

Frontend: Next.js is strongly indicated by framework-specific asset paths.
Styling: CSS custom properties define semantic colors, spacing, and radii.
Typography: Three recurring sizes form a consistent scale.
Limit: The cross-origin primary stylesheet could not be inspected.

التدقيق الأمني

مخاطر عالية

v1 • ٤‏/٩‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Most static findings are false positives caused by JavaScript template literals, Markdown code formatting, property names, and website fingerprinting. The skill contains a mutable package installation command and an unrestricted URL fetch that can reach internal resources.

الملفات التي تم فحصها

543

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (1)

مرتفع

no-browser.md:8-13

Unrestricted URL Fetch Can Reach Internal Services

The curl workflow follows redirects for an unchecked URL and then fetches linked stylesheets. A supplied URL can target local or private-network services.

The documented curl command directly consumes URL input with redirect following and no scheme, address, or redirect validation.

عناصر مراجعة القدرات (1)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

متوسط

SKILL.md:39-41

Ruby/shell backtick execution

```bash

The fenced block runs npx with the mutable latest tag and changes the Claude MCP configuration. This executes unpinned third-party package code.

عوامل الخطر

⚙️ الأوامر الخارجية (25)

📁 الوصول إلى نظام الملفات (1)

read-the-system.md:51

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/jakubkrehel-explain-interface/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/jakubkrehel-explain-interface/security.svg)](https://skillstore.io/skills/jakubkrehel-explain-interface?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/jakubkrehel-explain-interface?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jakubkrehel-explain-interface/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/jakubkrehel-explain-interface.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

jakubkrehel. (2026). explain-interface security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jakubkrehel-explain-interface/audits/1

اقتباس BibTeX

@techreport{jakubkrehel-jakubkrehel-explain-interface-2026,
  author = {jakubkrehel},
  title = {explain-interface security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/jakubkrehel-explain-interface/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "explain-interface security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "jakubkrehel"
date-released: "2026-09-04"
url: "https://skillstore.io/skills/jakubkrehel-explain-interface/audits/1"
identifiers:
  - type: other
    value: "skillstore:jakubkrehel-explain-interface:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Investigate a Visual Effect

Trace the layers, CSS properties, and motion that create a specific effect on a live page.

Document a Design System

Measure typography, spacing, colors, tokens, breakpoints, and component fingerprints across an interface.

Reconstruct from a Screenshot

Develop an evidence-labeled implementation recipe when the original page or source is unavailable.

جرّب هذه الموجّهات

Explain One Effect

Explain how the [effect] on [URL] is built. Identify each layer and label claims as measured, derived, or inferred.

Read the Interface System

Analyze [URL] as a complete interface system. Cover the frontend stack, tokens, typography, spacing, colors, motion, breakpoints, fonts, and images.

Reconstruct a Screenshot

Reconstruct how this screenshot could be implemented. Separate exact pixel evidence from ratios and assumptions, then list details that require a live URL.

Compare Responsive States

Inspect [URL] at desktop and mobile widths. Compare tokens, spacing, breakpoints, motion, and focus behavior with evidence for every difference.

أفضل الممارسات

Name the inspection route and label every claim as measured, derived, or inferred.
Inspect pseudo-elements, multiple viewport sizes, theme states, motion, and keyboard focus before concluding.
Explain the transferable mechanism and identify values or assets that cannot be copied safely.