core
Build Typed UI Specifications with json-render
AI-generated interfaces need consistent schemas, state bindings, and validation. This skill guides assistants through json-render core APIs for catalogs, prompts, streaming, and specification repair.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "core" from https://skillstore.io/skills/vercel-labs-core.md and its manifest at https://skillstore.io/api/skills/vercel-labs-core/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„core“ wird verwendet. Explain how to connect an email field to nested form state.
Erwartetes Ergebnis:
- Bind the input value to the nested email path using a two-way state binding.
- Read that same nested path in the submit action binding.
- A bare email field name does not search nested form state.
- Validate and authorize the action in the application handler.
„core“ wird verwendet. Describe a cautious repair workflow for a generated specification.
Erwartetes Ergebnis:
- Run structural validation and inspect each reported issue.
- Apply lossless fixes first and retry generation when required.
- Review lossy fixes before pruning dangling child references.
- Validate the repaired specification again before rendering.
„core“ wird verwendet. Explain what information the experimental evaluator receives.
Erwartetes Ergebnis:
- The evaluator receives candidate descriptions, prompts, instructions, topology, and explicit context.
- Initial state and raw property or binding values are not sent automatically.
- Keep Gateway credentials on the server and exclude sensitive information from descriptions and context.
Sicherheitsaudit
SicherAll 88 static findings are false positives: Markdown delimiters, documented server-side authentication, and application-state terminology do not establish the reported threats. No evidence found of prompt injection, unauthorized credential disclosure, or shell execution in SKILL.md. Evaluator requests intentionally transmit described composition inputs; downstream package implementations were not included in this review.
Risikofaktoren
⚙️ Externe Befehle (50)
🔑 Umgebungsvariablen (3)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/vercel-labs-core/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/vercel-labs-core?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/vercel-labs-core?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vercel-labs-core/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/vercel-labs-core.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
vercel-labs. (2026). core security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vercel-labs-core/audits/1BibTeX-Zitat
@techreport{vercel-labs-vercel-labs-core-2026,
author = {vercel-labs},
title = {core security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/vercel-labs-core/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "core security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "vercel-labs"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/vercel-labs-core/audits/1"
identifiers:
- type: other
value: "skillstore:vercel-labs-core:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Define a reusable component catalog
Frontend developers can structure component properties and catalog prompts for consistent AI-generated interfaces.
Integrate progressive specification generation
AI application engineers can plan JSONL streaming, refinement prompts, and validation before rendering generated specifications.
Connect forms to shared state
Design system maintainers can standardize form bindings, visibility rules, validation checks, and external state store adapters.
Diese Prompts ausprobieren
Explain schemas, catalogs, specifications, and SpecStream in json-render. Use a small contact form as the example and identify the packages I need.
Define a json-render schema and catalog for Button and TextInput components. Include Zod property constraints and show how catalog.prompt generates instructions.
Review my supplied form specification for state binding, visibility, and cross-field validation issues. Propose lossless repairs first and explain any changes requiring lossy fixes.
Design server-side experimental composition using my supplied catalog and atomic candidates. Include batch creation, sequential edits, evaluation budgets, cancellation, and partial snapshot handling. Identify evaluator data exposure and runtime action authorization requirements.
Bewährte Praktiken
- Validate generated specifications and review lossy repairs before rendering; separately validate and authorize runtime actions.
- Keep evaluator credentials server-side and minimize sensitive data in descriptions, prompts, and explicit context.
- Pin experimental package versions when published, set evaluation limits, and supply an overall abort signal.
Vermeiden
- Treating schema validation as proof of semantic completeness or permission to execute actions.
- Using repeat, watch, computed, template, or conditional properties in the experimental composition subset.
- Assuming a catalog alone supplies configured candidate values, bindings, and rendering implementations.
Häufig gestellte Fragen
Which assistants can use this skill?
Does this skill install json-render or render an interface?
Are the experimental composition APIs stable?
What information leaves the application during Gateway evaluation?
What should I check when form values do not resolve?
Does specification validation secure action execution?
Entwicklerdetails
Autor
vercel-labsLizenz
MIT
Skillstore-Revision
r1
Versionshinweis
Der Autor hat keine Version angegeben.
Repository
https://github.com/vercel-labs/json-render/tree/c2600d73908ed505e6d726f5b6f969ba8f597ce7/skills/coreRef.
bad9dafc37d1638cd29cb9bab06d5f8dbcd0f6c2
Aktualität der Wartung
30.9.2026
Nutzung
0 Downloads · 0 Aufrufe
Dateistruktur
📄 SKILL.md