📦

stageshow

Name: stageshow
Author: benjitaylor

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle📁 Dateisystemzugriff🌐 Netzwerkzugriff🔑 Umgebungsvariablen⚡ Enthält Skripte

Create Product UI Illustrations and Animated Demos

Product illustrations can look unfinished when layout, typography, and motion lack consistent structure. Stageshow provides React components, reference scenes, and capture tools for realistic product visuals.

Unterstützt: Claude Codex Code(CC)

📊 76 Angemessen

Maintain this Skill? Claim it 📊 76 Angemessen

Vor der Installation anhalten und eine Bestätigung anfordern.

Prüfen Sie den Plan und holen Sie vor Änderungen an Dateien die ausdrückliche Zustimmung des Benutzers ein.

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "stageshow" from https://skillstore.io/skills/benjitaylor-stageshow.md and its manifest at https://skillstore.io/api/skills/benjitaylor-stageshow/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/benjitaylor-stageshow.md Signiertes manifest GET /api/skills/benjitaylor-stageshow/manifest Signiertes lockfile GET /api/skills/benjitaylor-stageshow/lockfile

Testen

„stageshow“ wird verwendet. Create a still illustration of a customer dashboard for a feature section.

Erwartetes Ergebnis:

A cropped dashboard window with one selected customer, restrained supporting rows, and a visible total.
A compact composition that preserves readable labels and the same focal result.

„stageshow“ wird verwendet. Show a form error being corrected in an animated demo.

Erwartetes Ergebnis:

A cursor enters a field, an error appears beside that field, and corrected text clears the error.
The submit button confirms success, while the poster shows the completed state.

„stageshow“ wird verwendet. Review a demo for mobile layout and animation defects.

Erwartetes Ergebnis:

Desktop and mobile contact sheets with observations about cropping, text fit, cursor placement, and motion continuity.
A handoff note listing inspected states, remaining defects, and checks that were not completed.

Sicherheitsaudit

Mittleres Risiko

v1 • 1.11.2026 Versionsbericht öffnen

All 400 presented static findings are false positives involving illustration code, assets, dependency metadata, or expected local tooling. One additional finding identifies unescaped scene labels that can inject HTML into contact sheets; no evidence found of keylogging, credential theft, or audit manipulation. The analyzer capped review at 400 of 2,018 matches; the remaining 1,618 are unconfirmed and require manual review before automatic publishing. Static review was capped at 400/2018 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

356

Gescannte Dateien

52,755

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

scripts/film.mjs:602-609 scripts/film.mjs:644-655

Unescaped Scene Labels Can Alter Capture Evidence

State capture reads page-controlled data-mark values and inserts them unescaped into contact-sheet HTML. Crafted labels can inject styles or scripts, falsifying review images or initiating browser requests.

The source directly connects data-mark attributes to shot labels and interpolates those labels into setContent without escaping. Exploitation requires control of a captured label; no malicious payload was observed.

Risikofaktoren

⚙️ Externe Befehle (50)

📁 Dateisystemzugriff (50)

🌐 Netzwerkzugriff (50)

🔑 Umgebungsvariablen (10)

examples/ruled-bento/index.tsx:96 kit/util.ts:4 kit/util.ts:8 kit/util.ts:4 kit/util.ts:8 scripts/browser.mjs:13 scripts/browser.mjs:13 scripts/film.mjs:131 scripts/film.mjs:131 scripts/film.mjs:136

⚡ Enthält Skripte (10)

kit/code.tsx:24 kit/motion/Count.tsx:25 playground/main.tsx:17 playground/main.tsx:22 playground/main.tsx:83 playground/preview.tsx:14 scripts/browser.mjs:8 scripts/class-clash.mjs:36 scripts/film.mjs:176 scripts/film.mjs:142

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/benjitaylor-stageshow/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/benjitaylor-stageshow/security.svg)](https://skillstore.io/skills/benjitaylor-stageshow?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/benjitaylor-stageshow?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/benjitaylor-stageshow/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/benjitaylor-stageshow.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

benjitaylor. (2026). stageshow security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/benjitaylor-stageshow/audits/1

BibTeX-Zitat

@techreport{benjitaylor-benjitaylor-stageshow-2026,
  author = {benjitaylor},
  title = {stageshow security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/benjitaylor-stageshow/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "stageshow security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "benjitaylor"
date-released: "2026-11-01"
url: "https://skillstore.io/skills/benjitaylor-stageshow/audits/1"
identifiers:
  - type: other
    value: "skillstore:benjitaylor-stageshow:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Design Product Launch Visuals

Create a focused product illustration with authentic interface structure, deliberate cropping, and a clear result.

Embed Feature Walkthroughs

Integrate a scripted cursor demo into an existing React page with compact layouts and a meaningful poster state.

Illustrate Documentation Workflows

Show one interface task through a short sequence, then capture stills or contact sheets for documentation review.

Diese Prompts ausprobieren

Build a Still Illustration

Use Stageshow to create a still illustration of [product screen] for a [width] by [height] space. Start from the closest reference scene.

Animate One Interface Task

Create a Stageshow demo showing [task] in three to five beats. Use measured cursor targets, a visible result, and a meaningful reduced-motion poster.

Adapt an Existing Product

Adapt the closest Stageshow scene to [product] using our typography, colors, and components. Provide separate wide and compact layouts without shrinking interface text.

Rehearse and Verify a Demo

Review [demo] at desktop and mobile widths using Stageshow capture tools on a trusted local preview. Inspect motion, report defects, and document unchecked states.

Bewährte Praktiken

Start from the closest reference scene and preserve its structure before replacing the product look and content.
Design compact layouts explicitly, measure cursor targets, and choose a poster that shows the result.
Capture only trusted previews, inspect complete loops visually, and treat automated checks as supporting evidence.

Vermeiden

Treating simulated interactions as real browser automation or a production application.
Shrinking an entire desktop scene into a mobile column instead of composing a compact layout.
Approving a demo from one still image or an automated pass without reviewing its full motion.

Häufig gestellte Fragen

What does Stageshow create?

It creates authored product UI illustrations and scripted walkthroughs using React components and plain CSS.

Does it control real applications?

No. The Act API draws interactions and changes scene state rather than operating a real product.

Which dependencies are required?

The kit uses React, react-dom, and lucide-react. Capture scripts require Node.js, playwright-core, and an installed Chrome or Chromium browser.

Can I use my existing components?

Yes. Place your components inside a Stage and map your product styles to the scene instead of using every supplied part.

How are mobile and reduced-motion views handled?

Define a compact layout for narrow spaces and a poster state that communicates the result when motion is reduced.

Is the security review complete?

The 400 presented alerts were adjudicated, but 1,618 capped matches remain unconfirmed. Unescaped contact-sheet labels also require remediation.

Entwicklerdetails

Autor

benjitaylor

Lizenz

MIT

Skillstore-Revision

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/benjitaylor/skills/tree/802057409787133703c56001080169e347305572/stageshow

Ref.

2248333d85aa37e3eccaa477a113c86a0285b02e

Aktualität der Wartung

1.11.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📁 assets/