Habilidades explainer-default

📦

explainer-default

Name: explainer-default
Author: barty-bart

Revisión del contenido r1 Riesgo medio 📁 Acceso al sistema de archivos⚙️ Comandos externos🌐 Acceso a red🔑 Variables de entorno

Create Product Explainer Videos with Music

Software teams need clear product demonstrations without recording every interface interaction. This skill guides editable HTML animations and MP4 rendering with music and motion blur.

Compatible con: Claude Codex Code(CC)

📊 69 Adecuado

Maintain this Skill? Claim it 📊 69 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "explainer-default" from https://skillstore.io/skills/barty-bart-explainer-default.md and its manifest at https://skillstore.io/api/skills/barty-bart-explainer-default/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/barty-bart-explainer-default.md Manifest firmado GET /api/skills/barty-bart-explainer-default/manifest Lockfile firmado GET /api/skills/barty-bart-explainer-default/lockfile

Pruébalo

Usando "explainer-default". Plan a 60-second demo for a task manager with capture, assignment, and progress tracking.

Resultado esperado:

0-5 seconds: introduce the product name.
5-10 seconds: present the task coordination problem.
10-40 seconds: show capture, assignment, and progress tracking in three interface chapters.
40-57 seconds: summarize the workflow and show the supplied call to action.
57-60 seconds: hold the product name on the closing screen.

Usando "explainer-default". Prepare review materials before exporting the final video.

Resultado esperado:

Review package: editable HTML preview, contact sheet, and draft MP4.
Review notes: check text clipping, interface accuracy, camera framing, pacing, and audio balance.
Final package after approval: motion-blurred MP4 with audio and a separate silent copy.

Auditoría de seguridad

Riesgo medio

v1 • 20/10/2026 Abrir el informe versionado

Most static alerts are Markdown formatting, expected rendering operations, or audio serialization; no evidence of credential theft or prompt injection was found. Confirmed risks involve deleting existing frame directories and injecting entries through unescaped FFmpeg manifest paths. A separate semantic finding identifies unnecessary cross-file browser access when rendering untrusted HTML.

Archivos escaneados

267

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio

SKILL.md:154-160

Unnecessary Cross-File Browser Access

Chromium launches with --allow-file-access-from-files before loading the selected local HTML. Untrusted page scripts could read other local files and disclose accessible data.

The flag explicitly relaxes local-file origin restrictions, and no request filtering is configured. Exploitation requires untrusted rendered HTML; no malicious page is included.

Elementos de revisión de capacidades (2)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Medio

SKILL.md:184

Synchronous file operations

for (let i = 0; i < times.length; i++) writeFileSync(`${dir}/${String(i).padStart(3, '0')}.jpg`, awa

Frames use a predictable output-derived directory that mkdirSync permits to exist. Recursive cleanup at line 188 deletes any unrelated contents already inside.

Medio

SKILL.md:214

Synchronous file operations

writeFileSync(list, segs.filter(Boolean).map(s => `file '${path.resolve(s)}'`).join('\n'));

Output-derived paths enter single-quoted concat entries without escaping quotes or newlines. Crafted filenames can inject manifest directives, while line 215 disables safe-path checks.

Factores de riesgo

📁 Acceso al sistema de archivos (6)

README.md:3 README.md:9 SKILL.md:147 SKILL.md:184 SKILL.md:214 SKILL.md:232

⚙️ Comandos externos (40)

🌐 Acceso a red (1)

SKILL.md:155

🔑 Variables de entorno (2)

SKILL.md:155 SKILL.md:155

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/barty-bart-explainer-default/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/barty-bart-explainer-default/security.svg)](https://skillstore.io/skills/barty-bart-explainer-default?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/barty-bart-explainer-default?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-explainer-default/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/barty-bart-explainer-default.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

barty-bart. (2026). explainer-default security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-explainer-default/audits/1

Cita BibTeX

@techreport{barty-bart-barty-bart-explainer-default-2026,
  author = {barty-bart},
  title = {explainer-default security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/barty-bart-explainer-default/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "explainer-default security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-explainer-default/audits/1"
identifiers:
  - type: other
    value: "skillstore:barty-bart-explainer-default:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Prepare a Product Launch

Turn an approved product brief into a one-minute launch demonstration with branded interface scenes and a closing call to action.

Explain a Feature Workflow

Show several interface steps with readable labels, cursor actions, and timed results without recording a live application.

Build Editable Motion Assets

Create a deterministic HTML animation, review contact sheets, and refine the draft before exporting a motion-blurred final video.

Prueba estos prompts

Start a Simple Demo

Create a 60-second explainer for [product] using these facts: [facts]. Ask for missing essentials and use synthesized music.

Apply Brand Direction

Plan a 45-second portrait demo for [product]. Use [brand assets], show [three features], and end with this approved URL: [URL].

Review Before Final Rendering

Create a timed beat sheet, editable HTML, contact sheet, and draft for [product]. Wait for approval before the final render.

Refine a Detailed Workflow

Build a 90-second landscape demo from [approved brief]. Show [five workflow steps], use [music file], and flag placeholders before rendering.

Mejores prácticas

Supply verified product facts, approved branding, and the exact workflow before scripting.
Review contact sheets and a draft before starting the slower final render.
Use trusted HTML and a dedicated output folder; address the documented renderer risks before processing external inputs.

Evitar

Inventing customer counts, testimonials, offers, or integration support.
Treating reconstructed interface scenes as proof of actual product behavior.
Rendering untrusted HTML or reusing output paths that contain existing files.

Preguntas frecuentes

Which AI tools are supported?

The skill provides instructions for Claude, Codex, and Claude Code. Rendering still requires the local dependencies.

What do I need to provide?

Provide the product name and description. A website, brand assets, feature list, and approved call to action improve accuracy.

What files can the workflow produce?

It can produce editable HTML, a contact sheet, draft MP4, final MP4 with audio, and a silent MP4.

Does it record my live application?

No. It rebuilds selected interface moments from product information and renders those animations.

Can I use my own music?

Yes. Supply a music file, or use the default synthesized soundtrack with interface sound effects.

Is the renderer suitable for untrusted files?

Not without hardening. It enables cross-file browser access, uses unescaped manifest paths, and recursively removes a predictable frame directory.

Detalles del desarrollador

Autor

barty-bart

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/barty-bart/motion-graphics/tree/3d83d987d658601d8a1269eb691622bdcd427335/skills/explainer-default

Ref.

feef9bda10fa496f1261820ba72add6a4b03b3c6

Actualidad del mantenimiento

20/10/2026

Uso

2 descargas · 0 vistas

Estructura de archivos

📄 README.md

📄 SKILL.md