📦
baoyu-comic
85إنشاء قصص معرفية مصورة من مواد مصدرية
يصعب تحويل المواد المصدرية الطويلة إلى دروس بصرية واضحة. ترشد هذه المهارة Claude أو Codex أو Claude Code خلال التحليل، وتخطيط لوحات القصة، ومطالبات الصور، وتجميع PDF.
التصميم والإبداع عرض
المهارات baoyu-post-to-wechat
📦
baoyu-post-to-wechat
مراجعة المحتوى r1 حرج 🌐 الوصول إلى الشبكة⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات🔑 متغيرات البيئة⚡ يحتوي على سكربتات
نشر مسودات WeChat Official Account
غالبا ما يتطلب نشر مقالات WeChat المنسقة نسخا يدويا، وإدراج الصور، وإعداد المسودة. تؤتمت هذه المهارة إنشاء المسودات من Markdown وHTML والنصوص والصور عبر جلسة Chrome مضبوطة.
يدعم: Claude Codex Code(CC)
لا تثبّت هذا Skill تلقائيًا.
تتطلب السياسة المعتمدة مراجعة المشغّل قبل أي إجراء تثبيت.
التثبيت باستخدام Agent لدي
انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.
طلب الوكيل
Review the Skillstore skill "baoyu-post-to-wechat" from https://skillstore.io/skills/jimliu-baoyu-post-to-wechat.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-post-to-wechat/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.
موارد مهيّأة لـ Agents
استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.
اختبرها
جارٍ استخدام "baoyu-post-to-wechat". مقال Markdown يحتوي على frontmatter وصور مضمنة وسمة grace.
النتيجة المتوقعة:
مسودة WeChat بعنوان ومؤلف وملخص ونص مقال منسق وأصول صور مدرجة.
جارٍ استخدام "baoyu-post-to-wechat". عنوان قصير، ونص من 1,200 حرف، ومجلد صور منتجات.
النتيجة المتوقعة:
مسودة صور ونصوص مع اختصار العنوان والنص ليتوافقا مع حدود WeChat وتحميل الصور بترتيب مفروز.
جارٍ استخدام "baoyu-post-to-wechat". ملف HTML تم تصديره من عارض Markdown.
النتيجة المتوقعة:
المحتوى المعروض منسوخ عبر حافظة النظام وملصق في محرر مقالات WeChat.
التدقيق الأمني
حرجv5 • ٩/٧/٢٠٢٦ فتح التقرير المرتبط بالإصدار
The skill provides useful WeChat publishing automation but relies on powerful local capabilities: Chrome DevTools control, persistent authenticated browser profiles, clipboard access, keyboard simulation, filesystem reads and writes, and external process execution. Several scanner hits are false positives from regex parsing, SVG markup, CSS, and localhost checks, but the overall behavior still requires strong user consent and sandboxing. Static review was capped at 400/677 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
27
الملفات التي تم فحصها
5,854
الأسطر التي تم تحليلها
111
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة
مخاوف أمنية مؤكدة (15)
حرج
Keylogger keywords
console.log(`Send real paste keystroke (Cmd+V / Ctrl+V) to the frontmost application
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
Keylogger keywords
// Build script that activates app (if specified) and sends keystroke in one atomic operation
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
Keylogger keywords
keystroke "v" using command down
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
Keylogger keywords
keystroke "v" using command down
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
Keylogger keywords
console.log(`[paste] Sending paste keystroke (retries=${retries}, delay=${delayMs}ms)...`);
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
Keylogger keywords
console.log('[paste] Paste keystroke sent successfully');
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
Keylogger keywords
console.error('[paste] Failed to send paste keystroke');
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
Keylogger keywords
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "c" using command down'
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
عرض جميع النتائج المؤكدة البالغة 15
حرج
Keylogger keywords
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "v" using command down'
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
Keylogger keywords
| `scripts/paste-from-clipboard.ts` | Send real paste keystroke |
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
حرج
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The code combines browser automation, local command execution, filesystem access, network access, and persisted browser profiles. That combination can publish content or access authenticated browser state if misused.
مرتفع
scripts/wechat-agent-browser.ts:13-17scripts/wechat-agent-browser.ts:184-195scripts/wechat-agent-browser.ts:215-217
Shell Command Injection Risk in Browser Helper
The helper builds a shell command string for agent-browser and runs it with execSync. Later calls interpolate post title, content, selector, and image data into that command path, which can allow command injection or unintended browser actions if inputs contain shell metacharacters.
execSync receives a constructed shell string, and reviewed call sites interpolate workflow-controlled strings. The exact exploitability depends on inputs, but the pattern is strong.
مرتفع
Authenticated Browser Session Automation
The skill launches Chrome with a persistent user data directory and controls an authenticated WeChat session over CDP. A compromised or misused workflow could operate inside the user account, save drafts, upload files, or interact with the editor without normal manual safeguards.
The reviewed files explicitly launch Chrome, persist a profile, connect via CDP, and wait for WeChat login. This confirms account-level browser automation intent.
متوسط
scripts/md-to-wechat.ts:73-83scripts/md/extensions/plantuml.ts:142-145scripts/md/extensions/plantuml.ts:191-199
Remote Markdown Assets and Diagram Rendering
Markdown conversion can download remote image URLs and PlantUML rendering can send encoded diagram text to an external PlantUML server. This may disclose source content or asset URLs during article preparation.
The code directly downloads http or https images and constructs PlantUML server URLs from diagram content. This is legitimate functionality but creates clear data disclosure risk.
منخفض
Base64 encode
const base64 = btoa(String.fromCharCode(...utf8Bytes))
Base64-style encoding is used for PlantUML diagram URLs, not malware obfuscation. It is kept as a low-confidence confirmed transformation because it sends encoded user diagram text to a server.
عناصر مراجعة القدرات (111)
هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.
مرتفع
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
مرتفع
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
مرتفع
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
مرتفع
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
مرتفع
Node.js child_process module
import { execSync, spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
مرتفع
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
مرتفع
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
مرتفع
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', imagePath]);
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
مرتفع
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', htmlFilePath]);
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
مرتفع
PowerShell invocation
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
مرتفع
Process spawn
const chrome = spawn(chromePath, [
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
مرتفع
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
مرتفع
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
مرتفع
Process spawn
const chrome = spawn(chromePath, [
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
مرتفع
Synchronous process execution
const result = execSync(fullCmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
execSync builds and runs an agent-browser shell command. Shell-based synchronous execution is risky, especially when command text includes workflow-controlled values.
مرتفع
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', renderScript, tempMdPath, '--theme', theme], {
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
const which = spawnSync('which', [tool.cmd], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
const result = spawnSync(tool.cmd, tool.args, { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
const result = spawnSync('agent-browser', ['--session', SESSION, ...args], {
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', copyScript, 'image', imagePath], { stdio: 'inherit' })
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "c" using command down'
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
spawnSync('xdotool', ['key', 'ctrl+c']);
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "v" using command down'
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
spawnSync('xdotool', ['key', 'ctrl+v']);
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
مرتفع
Synchronous spawn
const result = spawnSync('npx', args, { stdio: ['inherit', 'pipe', 'pipe'] });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
متوسط
Dynamic import() expression
const { Infographic, setDefaultFont, setFontExtendFactor, exportToSVG } = await import('@antv/infogr
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
متوسط
Dynamic import() expression
const mermaid = await import("mermaid");
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
متوسط
Dynamic import() expression
const module = await import(/* @vite-ignore */ grammarUrlFor(language))
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
متوسط
File stream creation
fs.createReadStream(filePath).on('error', reject).pipe(child.stdin);
The code streams local files or downloaded content as part of clipboard and rendering operations. This is expected, but it handles user-selected file data.
متوسط
File stream creation
const file = fs.createWriteStream(destPath);
The code streams local files or downloaded content as part of clipboard and rendering operations. This is expected, but it handles user-selected file data.
متوسط
innerHTML assignment (XSS risk)
container.innerHTML = `<div style="color: red; padding: 10px; border: 1px solid red;">Infographic 渲染
The renderer writes generated HTML into the DOM. If untrusted Markdown or remote highlighting output reaches this path, it can create an XSS-style rendering risk.
متوسط
innerHTML assignment (XSS risk)
codeBlock.innerHTML = highlighted
The renderer writes generated HTML into the DOM. If untrusted Markdown or remote highlighting output reaches this path, it can create an XSS-style rendering risk.
متوسط
Node.js fs operations
fs.unlinkSync(destPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
fs.unlinkSync(destPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
fs.unlink(destPath, () => {});
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
const content = fs.readFileSync(markdownPath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
baseCss: fs.readFileSync(basePath, "utf-8"),
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
themeCss: fs.readFileSync(themePath, "utf-8"),
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
const markdown = fs.readFileSync(inputPath, "utf-8");
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
fs.renameSync(outputPath, backupPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
fs.writeFileSync(outputPath, html, "utf-8");
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
const content = fs.readFileSync(htmlPath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
Node.js fs operations
const text = fs.readFileSync(filePath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
متوسط
outerHTML assignment (XSS risk)
placeholderElement.outerHTML = createPlantUMLHTML(imageUrl, options, svgContent)
The PlantUML renderer can replace DOM content with SVG fetched from a remote server. Injecting remote SVG into outerHTML is a real content injection risk.
متوسط
Synchronous file operations
const content = fs.readFileSync(markdownPath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
متوسط
Synchronous file operations
baseCss: fs.readFileSync(basePath, "utf-8"),
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
متوسط
Synchronous file operations
themeCss: fs.readFileSync(themePath, "utf-8"),
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
متوسط
Synchronous file operations
const markdown = fs.readFileSync(inputPath, "utf-8");
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
متوسط
Synchronous file operations
fs.writeFileSync(outputPath, html, "utf-8");
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
متوسط
Synchronous file operations
const content = fs.readFileSync(htmlPath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
متوسط
Synchronous file operations
const text = fs.readFileSync(filePath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
متوسط
Temp directory access
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
متوسط
Temp directory access
const tempDir = options?.tempDir ?? path.join(os.tmpdir(), 'wechat-article-images');
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
متوسط
Temp directory access
"htmlPath": "/tmp/wechat-article-images/temp-article.html",
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
متوسط
Temp directory access
"localPath": "/tmp/wechat-article-images/img.png",
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
متوسط
WebSocket connection
const ws = new WebSocket(url);
The code connects to Chrome DevTools Protocol over WebSocket. This grants browser automation capability in an authenticated WeChat session.
متوسط
WebSocket connection
const ws = new WebSocket(url);
The code connects to Chrome DevTools Protocol over WebSocket. This grants browser automation capability in an authenticated WeChat session.
منخفض
Environment variable access (dot notation)
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
منخفض
Environment variable access (dot notation)
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
منخفض
Environment variable access (dot notation)
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
منخفض
Environment variable access (dot notation)
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
منخفض
Environment variable object
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
منخفض
Environment variable object
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
منخفض
Environment variable object
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
منخفض
Environment variable object
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
منخفض
Fetch API call
const res = await fetch(url, { redirect: 'follow' });
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
منخفض
Fetch API call
const response = await fetch(svgUrl)
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
منخفض
Fetch API call
fetch('file://${img}').then(r => r.blob()).then(b => {
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
منخفض
Fetch API call
const res = await fetch(url, { redirect: 'follow' });
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
منخفض
Hardcoded URL
[Link text](https://example.com)
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
const version = await fetchJson<{ webSocketDebuggerUrl?: string }>(`http://127.0.0.1:${port}/json/ve
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
* https://github.com/bent10/marked-extensions/tree/main/packages/alert
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
* A [marked](https://marked.js.org/) extension to support [GFM alerts](https://github.com/orgs/commu
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
// 行内公式对齐 https://groups.google.com/g/mathjax-users/c/zThKffrrCvE?pli=1
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
* @default 'https://www.plantuml.com/plantuml'
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
serverUrl: options.serverUrl || `https://www.plantuml.com/plantuml`,
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
* https://talk.commonmark.org/t/proper-ruby-text-rb-syntax-support-in-markdown/2279
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
Original project: https://github.com/doocs/md
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
const HLJS_CDN_BASE = `https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/${HLJS_VERSION
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Hardcoded URL
const version = await fetchJson<{ webSocketDebuggerUrl?: string }>(`http://127.0.0.1:${port}/json/ve
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
منخفض
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(imagePath)) throw new Error(`File not found: ${imagePath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(htmlFilePath)) throw new Error(`File not found: ${htmlFilePath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(localPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(htmlPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(markdownPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(basePath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(themePath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(inputPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (fs.existsSync(outputPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(img)) throw new Error(`Image not found: ${img}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
} else if (htmlFile && fs.existsSync(htmlFile)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (effectiveHtmlFile && fs.existsSync(effectiveHtmlFile)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (fs.existsSync(img)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(absPath)) throw new Error(`Markdown file not found: ${absPath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(absDir)) throw new Error(`Images directory not found: ${absDir}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Node.js fs stat operations
if (!fs.existsSync(img)) throw new Error(`Image not found: ${img}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
منخفض
Temp file creation
import { mkdtemp, rm, writeFile } from 'node:fs/promises';
Temporary files are created for clipboard and rendered HTML workflows. This is expected but relevant because generated content may contain user data.
منخفض
Temp file creation
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
Temporary files are created for clipboard and rendered HTML workflows. This is expected but relevant because generated content may contain user data.
عوامل الخطر
🌐 الوصول إلى الشبكة (49)
references/article-posting.md:51 scripts/cdp.ts:69 scripts/cdp.ts:132 scripts/cdp.ts:15 scripts/cdp.ts:80 scripts/cdp.ts:18 scripts/cdp.ts:80 scripts/md/extensions/alert.ts:21 scripts/md/extensions/alert.ts:23 scripts/md/extensions/alert.ts:153 scripts/md/extensions/alert.ts:157 scripts/md/extensions/alert.ts:165 scripts/md/extensions/alert.ts:171 scripts/md/extensions/alert.ts:176 scripts/md/extensions/alert.ts:181 scripts/md/extensions/alert.ts:186 scripts/md/extensions/alert.ts:191 scripts/md/extensions/alert.ts:196 scripts/md/extensions/alert.ts:201 scripts/md/extensions/alert.ts:206 scripts/md/extensions/alert.ts:211 scripts/md/extensions/alert.ts:216 scripts/md/extensions/alert.ts:221 scripts/md/extensions/alert.ts:226 scripts/md/extensions/alert.ts:231 scripts/md/extensions/alert.ts:236 scripts/md/extensions/alert.ts:241 scripts/md/extensions/alert.ts:251 scripts/md/extensions/alert.ts:256 scripts/md/extensions/katex.ts:26 scripts/md/extensions/plantuml.ts:193 scripts/md/extensions/plantuml.ts:7 scripts/md/extensions/plantuml.ts:35 scripts/md/extensions/plantuml.ts:61 scripts/md/extensions/plantuml.ts:78 scripts/md/extensions/plantuml.ts:241 scripts/md/extensions/ruby.ts:5 scripts/md/LICENSE:3 scripts/md/utils/languages.ts:80 scripts/wechat-agent-browser.ts:195 scripts/wechat-agent-browser.ts:6 scripts/wechat-article.ts:7 scripts/wechat-browser.ts:178 scripts/wechat-browser.ts:241 scripts/wechat-browser.ts:113 scripts/wechat-browser.ts:9 scripts/wechat-browser.ts:189 scripts/wechat-browser.ts:116 scripts/wechat-browser.ts:189
⚙️ الأوامر الخارجية (50)
scripts/cdp.ts:1 scripts/cdp.ts:184 scripts/cdp.ts:70 scripts/cdp.ts:80 scripts/cdp.ts:89 scripts/cdp.ts:155 scripts/cdp.ts:182 scripts/cdp.ts:185 scripts/cdp.ts:186 scripts/cdp.ts:204 scripts/cdp.ts:223 scripts/cdp.ts:228-236 scripts/cdp.ts:240 scripts/copy-to-clipboard.ts:1 scripts/copy-to-clipboard.ts:59 scripts/copy-to-clipboard.ts:96 scripts/copy-to-clipboard.ts:11-26 scripts/copy-to-clipboard.ts:79 scripts/copy-to-clipboard.ts:108 scripts/copy-to-clipboard.ts:129-186 scripts/copy-to-clipboard.ts:215 scripts/copy-to-clipboard.ts:227 scripts/copy-to-clipboard.ts:257 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:273 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:292 scripts/copy-to-clipboard.ts:327 scripts/copy-to-clipboard.ts:372 scripts/copy-to-clipboard.ts:377 scripts/copy-to-clipboard.ts:239 scripts/copy-to-clipboard.ts:249 scripts/md-to-wechat.ts:8 scripts/md-to-wechat.ts:178 scripts/md-to-wechat.ts:44 scripts/md-to-wechat.ts:77 scripts/md-to-wechat.ts:80 scripts/md-to-wechat.ts:151 scripts/md-to-wechat.ts:164-169 scripts/md-to-wechat.ts:169 scripts/md-to-wechat.ts:177-185 scripts/md-to-wechat.ts:185-190 scripts/md-to-wechat.ts:190-213 scripts/md-to-wechat.ts:239-270 scripts/md-to-wechat.ts:270-279 scripts/md/extensions/alert.ts:116 scripts/md/extensions/alert.ts:26 scripts/md/extensions/alert.ts:36 scripts/md/extensions/alert.ts:47 scripts/md/extensions/alert.ts:48
📁 الوصول إلى نظام الملفات (50)
scripts/cdp.ts:35 scripts/cdp.ts:58 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:115 scripts/copy-to-clipboard.ts:120 scripts/copy-to-clipboard.ts:3 scripts/copy-to-clipboard.ts:120 scripts/md-to-wechat.ts:35 scripts/md-to-wechat.ts:43 scripts/md-to-wechat.ts:57 scripts/md-to-wechat.ts:118 scripts/md-to-wechat.ts:79 scripts/md-to-wechat.ts:189 scripts/md-to-wechat.ts:269 scripts/md-to-wechat.ts:118 scripts/md-to-wechat.ts:28 scripts/md-to-wechat.ts:145 scripts/md-to-wechat.ts:120 scripts/md-to-wechat.ts:226 scripts/md-to-wechat.ts:230 scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:557 scripts/md/render.ts:558 scripts/md/render.ts:628 scripts/md/render.ts:643 scripts/md/render.ts:646 scripts/md/render.ts:548 scripts/md/render.ts:552 scripts/md/render.ts:616 scripts/md/render.ts:641 scripts/md/render.ts:557 scripts/md/render.ts:558 scripts/md/render.ts:628 scripts/md/render.ts:646 scripts/md/render.ts:181 scripts/md/render.ts:343 scripts/wechat-agent-browser.ts:98 scripts/wechat-article.ts:149 scripts/wechat-article.ts:236 scripts/wechat-article.ts:300 scripts/wechat-article.ts:338 scripts/wechat-article.ts:149 scripts/wechat-browser.ts:18 scripts/wechat-browser.ts:133 scripts/wechat-browser.ts:167 scripts/wechat-browser.ts:298
🔑 متغيرات البيئة (8)
⚡ يحتوي على سكربتات (16)
scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:12 scripts/md/extensions/infographic.ts:77 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/markup.ts:21 scripts/md/extensions/markup.ts:45 scripts/md/extensions/markup.ts:71 scripts/md/extensions/plantuml.ts:170 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/ruby.ts:31 scripts/md/extensions/ruby.ts:44 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:268 scripts/md/utils/languages.ts:112 scripts/md/utils/languages.ts:202 scripts/paste-from-clipboard.ts:32
الأنماط المكتشفة
Keylogger keywords×10[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
دقّقه: claude عرض سجل التدقيق →
شارك واستشهد بهذا التقرير
شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.
نسخ رابط التقرير
https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportشارة Markdown
[](https://skillstore.io/skills/jimliu-baoyu-post-to-wechat?utm_source=security_passport_badge)شارة HTML
<a href="https://skillstore.io/skills/jimliu-baoyu-post-to-wechat?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-post-to-wechat/security.svg" alt="Skillstore security assessment" loading="lazy"></a>بطاقة قابلة للتضمين
<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-post-to-wechat.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>الاستشهادات الأكاديمية (APA · BibTeX · CFF)
اقتباس APA
JimLiu. (2026). baoyu-post-to-wechat security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5اقتباس BibTeX
@techreport{jimliu-jimliu-baoyu-post-to-wechat-2026,
author = {JimLiu},
title = {baoyu-post-to-wechat security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-post-to-wechat security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "JimLiu"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5"
identifiers:
- type: other
value: "skillstore:jimliu-baoyu-post-to-wechat:audit:5"
description: "Skillstore immutable audit report identifier"
تقييم Skillstore
سبب هذا التقييم موثوقية الأدلة: متوسط 64
الهندسة المعمارية
85
قابلية الصيانة
85
المحتوى
72
المجتمع
83
الامتثال للمواصفات
ما الذي يمكنك بناؤه
نشر مسودة مقال منسق
تحويل مقال Markdown إلى محتوى محرر WeChat مع العنوان والمؤلف والملخص والصور المضمنة.
إنشاء تحديث صور ونصوص
إعداد منشور WeChat قصير بعنوان مضغوط ونص موجز ودفعة من الصور المحلية.
أتمتة خطوات النشر المتكررة
استخدام Claude Code أو Codex لتشغيل سير عمل النشر بعد مراجعة ملفات المصدر وأصول الصور.
جرّب هذه الموجّهات
نشر مسودة صور ونصوص بسيطة
استخدم هذه المهارة لإنشاء مسودة صور ونصوص في WeChat بعنوان "{title}"، ومحتوى من "{summary}"، وصور من "{image_folder}". لا ترسلها.تحويل Markdown إلى مسودة مقال
حول "{markdown_file}" إلى مسودة مقال في WeChat باستخدام سمة "grace". أدرج الصور المشار إليها واحفظ النتيجة كمسودة.إعداد منشور حملة تمت مراجعته
راجع "{markdown_file}" و"{image_folder}" بحثا عن أصول مفقودة، ثم أنشئ مسودة WeChat. أخبرني بما تم اختصاره أو تغييره قبل الحفظ.تشغيل سير عمل نشر مضبوط
استخدم أتمتة متصفح WeChat فقط بعد التأكد من توفر Chrome وأنني مسجل الدخول. أنشئ المسودة من "{markdown_file}"، وأبق المتصفح مفتوحا، ولا تنقر على submit دون موافقتي.أفضل الممارسات
- شغل سير العمل في ملف تعريف متصفح مخصص وراجع المسودة قبل الإرسال.
- استخدم ملفات صور محلية عند الإمكان لتجنب تنزيل الأصول البعيدة أثناء النشر.
- أبق أذونات WeChat وChrome والحافظة وإمكانية الوصول مرئية أثناء التشغيل الأول.
تجنب
- لا تشغل المهارة على Markdown غير موثوق دون مراجعة روابط الصور البعيدة والمخططات المضمنة.
- لا تسمح بالإرسال التلقائي للمنشورات التي تحتاج إلى موافقة قانونية أو موافقة العلامة التجارية أو التحرير.
- لا تستخدم أتمتة الحافظة أثناء وجود تطبيقات حساسة في الواجهة.
الأسئلة المتكررة
هل تنشر هذه المهارة مباشرة إلى WeChat?
يمكنها إنشاء المسودات وحفظها. يعتمد الإرسال على خيارات الأمر ويجب مراجعته قبل الموافقة.
لماذا تحتاج إلى Chrome?
تتحكم المهارة في واجهة ويب WeChat Official Account عبر أتمتة Chrome واتصال تصحيح محلي.
هل يمكن أن تعمل دون تسجيل الدخول?
لا. يجب على المستخدم تسجيل الدخول إلى صفحة WeChat Official Account، عادة عبر مسح رمز QR.
هل تستخدم حافظة النظام?
نعم. تنسخ بعض خطوات إدراج المقالات والصور HTML منسقا أو صورا إلى الحافظة وتلصقها في المحرر.
هل يمكنها التعامل مع الصور البعيدة في Markdown?
نعم. يمكن لسكريبت التحويل تنزيل URLs الصور البعيدة إلى مجلد مؤقت قبل الإدراج.
هل من الآمن تشغيلها تلقائيا?
تحتاج إلى الحذر لأنها تشغل المتصفحات، وتنفذ أوامر خارجية، وتستخدم الحافظة، وترسل أحداث لوحة المفاتيح.
تفاصيل المطور
المؤلف
JimLiuالترخيص
MIT
مراجعة Skillstore
r1
تنبيه الإصدار
لم يعلن المؤلف عن إصدار.
مرجع
1ffa7643651792ccb4bd3b15d924d2c97edff755
حداثة الصيانة
٢٠/٧/٢٠٢٦
الاستخدام
122 تنزيلات · 302 مشاهدات
المزيد من JimLiu
عرض الكل📦
baoyu-format-markdown
83تنسيق مقالات Markdown
غالبا ما تفتقر المسودات إلى بنية متسقة وfrontmatter وطباعة سهلة القراءة. تحول هذه المهارة النص العادي أو Markdown الخام إلى Markdown منظم وجاهز للمراجعة.
التوثيق عرض
📦
baoyu-article-illustrator
80توضيح المقالات بمرئيات متسقة
غالبا ما تحتاج المقالات الطويلة إلى مرئيات، لكن اختيار مواضع الصور والمطالبات يستغرق وقتا. تحلل هذه المهارة محتوى Markdown، وتخطط للرسوم التوضيحية، وتنشئ مطالبات ومواضع صور متسقة.
التصميم والإبداع عرض
📦
baoyu-cover-image
79إنشاء صور أغلفة المقالات
غالبا ما تحتاج أغلفة المقالات إلى مفهوم بصري واضح قبل بدء توليد الصور. تحلل هذه المهارة المحتوى وتنشئ مطالبة غلاف متوافقة مع الأسلوب، مع إرشادات للعنوان والتخطيط.
التصميم والإبداع عرض
📦
release-skills
78إصدار Baoyu Skills بأمان
قد تُغفل الإصدارات اليدوية خطوات سجل التغييرات والإصدار والوسوم. توجّه هذه المهارة سير عمل إصدار قابلًا للتكرار لـ baoyu-skills مع سجلات تغييرات ثنائية اللغة ووسم git محلي.
DevOps والبنية التحتية عرض
📦
baoyu-infographic
77إنشاء إنفوغرافيك من محتوى منظّم
قد يتطلب تحويل الملاحظات أو التقارير إلى عرض بصري واضح العديد من قرارات التصميم. تحلل هذه المهارة المحتوى، وتوصي بالتخطيطات والأنماط، وتعد مطالبة صورة لاستخدامها في سير عمل Claude أو Codex أو Claude Code.
التصميم والإبداع عرض
مهارات ذات صلة
عرض الكل📦
task-state-ledger
90Track Long Tasks With a Portable State Ledger
بواسطة glenskii
Long technical tasks lose decisions, evidence, and next actions across sessions. This skill maintains a concise Markdown state file with reviewed local evidence references.
الإنتاجية عرض
📦
playwright-testing
86تحسين تغطية اختبارات Playwright
بواسطة C0ntr0lledCha0s
يمكن أن تصبح مجموعات اختبارات Playwright غير مستقرة عندما تكون الإعدادات والمحددات وfixtures غير متسقة. تمنحك هذه المهارة أنماطًا عملية لاختبارات متصفح موثوقة، وتصحيح الأخطاء، وكائنات صفحات قابلة لإعادة الاستخدام.
البرمجة والتطوير عرض
📦
webapp-testing
85إنشاء اختبارات تطبيقات الويب باستخدام Playwright
بواسطة AutumnsGrove
اختبار المتصفح يدويًا بطيء وغالبًا ما يفوّت الانحدارات عبر النماذج والأجهزة وحالات الشبكة. تساعد هذه المهارة Claude وCodex وClaude Code على إنشاء اختبارات Playwright عملية لتدفقات عمل الويب الحقيقية.
البرمجة والتطوير عرض
📦
quiz-generator
84إنشاء اختبارات دورات تفاعلية
بواسطة 92Bilal26
يحتاج مؤلفو الدورات إلى اختبارات متوازنة تقيس الفهم بدلًا من الحفظ. تنشئ هذه المهارة تقييمات مكوّن Quiz من 50 سؤالًا مع ملاحظات توضيحية وروابط مصادر وفحوصات لتوزيع الإجابات.
الكتابة والمحتوى عرض
📦
meme-factory
84إنشاء ميمات باستخدام Memegen
بواسطة softaworks
غالبًا ما تحتاج الفرق إلى فكاهة بصرية سريعة دون فتح أدوات التصميم. تبني هذه المهارة عناوين URL للميمات، وتضمينات Markdown، وتنسيقات الميمات النصية من مطالبة.
التصميم والإبداع عرض
📦
nature-reader
82إنشاء قارئات أوراق بحثية ثنائية اللغة
بواسطة Yuan1z0825
يصعب دراسة الأوراق البحثية عندما تكون الترجمة والأشكال والتعليقات التوضيحية ومواقع المصدر منفصلة. تنشئ هذه المهارة ملف قراءة كاملًا بصيغة Markdown يتضمن النص الأصلي والترجمة الصينية والأصول المرئية والمراسي القابلة للتتبع.
البحث والتعلم عرض