Fähigkeiten explainer-high-energy

📦

explainer-high-energy

Name: explainer-high-energy
Author: barty-bart

Inhaltsrevision r1 Mittleres Risiko 📁 Dateisystemzugriff⚙️ Externe Befehle🌐 Netzwerkzugriff🔑 Umgebungsvariablen

Create High-Energy Product Promo Videos

Short product promos need clear messaging, coordinated motion, and synchronized sound. This skill guides HTML animation and MP4 rendering with beat-based scenes and synthesized audio.

Unterstützt: Claude Codex Code(CC)

📊 68 Angemessen

Maintain this Skill? Claim it 📊 68 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "explainer-high-energy" from https://skillstore.io/skills/barty-bart-explainer-high-energy.md and its manifest at https://skillstore.io/api/skills/barty-bart-explainer-high-energy/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/barty-bart-explainer-high-energy.md Signiertes manifest GET /api/skills/barty-bart-explainer-high-energy/manifest Signiertes lockfile GET /api/skills/barty-bart-explainer-high-energy/lockfile

Testen

„explainer-high-energy“ wird verwendet. Create a 15-second landscape promo for a task app. Approved message: group tasks by project. No statistics or website provided.

Erwartetes Ergebnis:

Opening: an accent line expands into the product name.
Message: kinetic words introduce project-based task organization.
Product moment: a task moves into a named project.
Closing: the product name returns without unsupported statistics or offers.
Review package: a scene beat sheet, interactive HTML preview, and draft MP4.

„explainer-high-energy“ wird verwendet. Prepare a portrait promo for a supplied brand, using its approved tagline and music file. Provide a review stage before final export.

Erwartetes Ergebnis:

Format: 1080 by 1920 with six connected scenes.
Timing: scene transitions follow the supplied track's measured tempo.
Review: contact sheets identify typography, framing, and transition issues before draft approval.
Final deliverables: interactive HTML, an MP4 with audio, and a silent MP4.

Sicherheitsaudit

Mittleres Risiko

v1 • 20.10.2026 Versionsbericht öffnen

All 57 static alerts are false positives for their reported patterns, including Markdown backticks, relative documentation links, audio serialization, and expected rendering operations. Two contextual renderer risks remain: recursive deletion of a predictable temporary directory and relaxed local-file access when rendering untrusted HTML. No evidence found of prompt injection, credential harvesting, or intentional data exfiltration.

Gescannte Dateien

256

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (2)

Mittel

SKILL.md:169-177

Recursive Cleanup Can Delete Existing User Files

The stills workflow reuses out + '.frames' with recursive mkdir, then deletes that entire directory recursively. Existing unrelated contents can be deleted.

mkdirSync permits an existing directory, and rmSync recursively removes it without ownership checks. Data loss requires an existing directory at the derived path.

Mittel

SKILL.md:140-149 SKILL.md:154-165

Untrusted Render Pages Receive Expanded Local File Access

Chromium opens the supplied HTML with --allow-file-access-from-files and no request restrictions. Untrusted page scripts could read accessible local files and transmit their contents.

The launch flag explicitly relaxes file-origin access, while pages load without request filtering. Exploitation requires untrusted HTML; no actual exfiltration payload was found.

Risikofaktoren

📁 Dateisystemzugriff (6)

README.md:3 README.md:9 SKILL.md:136 SKILL.md:173 SKILL.md:203 SKILL.md:221

⚙️ Externe Befehle (40)

🌐 Netzwerkzugriff (1)

SKILL.md:144

🔑 Umgebungsvariablen (2)

SKILL.md:144 SKILL.md:144

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/barty-bart-explainer-high-energy/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/barty-bart-explainer-high-energy/security.svg)](https://skillstore.io/skills/barty-bart-explainer-high-energy?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/barty-bart-explainer-high-energy?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-explainer-high-energy/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/barty-bart-explainer-high-energy.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

barty-bart. (2026). explainer-high-energy security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-explainer-high-energy/audits/1

BibTeX-Zitat

@techreport{barty-bart-barty-bart-explainer-high-energy-2026,
  author = {barty-bart},
  title = {explainer-high-energy security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/barty-bart-explainer-high-energy/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "explainer-high-energy security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-explainer-high-energy/audits/1"
identifiers:
  - type: other
    value: "skillstore:barty-bart-explainer-high-energy:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Product Launch Teaser

Turn an approved product brief into a short launch video with a clear message, branded typography, and an end card.

Vertical Campaign Promo

Plan a portrait-format promo using verified benefits, supplied brand assets, and synchronized music.

Code-Based Motion Prototype

Develop a seekable HTML animation, inspect scene contact sheets, and review a draft before rendering the final video.

Diese Prompts ausprobieren

Beginner: Create a First Promo

Create a 15-second promo for [product], which [verified function]. Use the default landscape format and synthesized music. Ask for missing brief details together.

Intermediate: Apply Brand Direction

Plan a 9:16 promo for [product] using [brand colors] and [supplied fonts]. Emphasize [verified benefit]. Use only these approved claims: [claims].

Advanced: Synchronize a Supplied Track

Build a 12-20 second promo using [approved music file]. Match scene changes to its measured tempo. Include [real interaction] and [approved call to action].

Expert: Review and Render Safely

Build deterministic HTML from [approved beat sheet]. Use unique temporary directories and restricted browser access. Review contact sheets and a draft before final rendering.

Bewährte Praktiken

Provide verified product wording, authorized brand assets, and one main message before planning scenes.
Review contact sheets and the draft for readability, accurate claims, and synchronization before starting the final render.
Render trusted HTML in an isolated workspace after hardening temporary-directory cleanup and browser file access.

Vermeiden

Inventing customer counts, ratings, discounts, or testimonials to make the promo appear more persuasive.
Adding too many ideas per scene or using text that cannot be read during its display time.
Rendering untrusted HTML with expanded file access or reusing an output directory containing unrelated files.

Häufig gestellte Fragen

Which AI tools are supported?

The skill targets Claude, Codex, and Claude Code. Rendering also requires a local environment with the stated dependencies.

What files does the workflow produce?

The workflow produces interactive HTML, review stills, a draft MP4, and final video exports. Audio export requires the page's audio-building function.

Which video lengths and formats are covered?

The style targets 12-20 seconds, with a 15-second default. Standard formats are 1920 by 1080 and 1080 by 1920.

Can it use my brand and website?

Yes. It can use supplied colors, fonts, and authorized logos. A supplied website provides product wording and brand references.

Does it require a music subscription?

No. The instructions describe synthesizing music and effects with Web Audio. You can instead supply a music file you are authorized to use.

Is the included renderer suitable for untrusted HTML?

Not without hardening. Restrict browser file access and requests, and replace predictable recursive temporary-directory cleanup before rendering untrusted content.