Habilidades answer-me-with-html
📦

answer-me-with-html

Revisión del contenido r1 Riesgo alto 📁 Acceso al sistema de archivos🔑 Variables de entorno⚡ Contiene scripts⚙️ Comandos externos🌐 Acceso a red

Turn Complex Answers Into Visual HTML Explainers

Complex explanations can hide relationships and trade-offs in long text. This skill turns Markdown drafts into visual HTML pages with diagrams, tables, and focused panels.

Compatible con: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 Deficiente

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "answer-me-with-html" from https://skillstore.io/skills/qingyuna-answer-me-with-html.md and its manifest at https://skillstore.io/api/skills/qingyuna-answer-me-with-html/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Pruébalo

Usando "answer-me-with-html". Explain how a cache handles requests.

Resultado esperado:

  • A local HTML page with a request-flow diagram showing cache hits and misses.
  • A comparison table explains latency, freshness, and failure behavior.
  • A conclusion panel states when cached data is returned.

Usando "answer-me-with-html". Explain the TCP handshake as a video with voice off.

Resultado esperado:

  • A local player page presents connection setup as captioned scenes.
  • A sequence diagram reveals SYN, SYN-ACK, and ACK in order.
  • The player includes scene navigation, playback speed, and export controls.

Auditoría de seguridad

Riesgo alto

Most supplied matches concern embedded assets, parser syntax, or secret-blocking checks; no evidence found of destructive intent or audit-targeted prompt injection. Speech transport, implicit cloud narration, and optional plaintext LAN sharing create credential and privacy risks. All 400 supplied findings are adjudicated; 1,812 unpresented matches still require manual review before automatic publication. Static review was capped at 400/2212 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

5
Archivos escaneados
13,383
Líneas analizadas
4
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (2)

Alto
Environment file access
const headers = { "content-type": "application/json", ...env.AM_TTS_API_KEY ? { authorization: `Bear
AM_TTS_API_KEY becomes a Bearer header for AM_TTS_URL. localSpeech does not require HTTPS or loopback, so remote HTTP exposes credentials and narration.
Medio
Cloud Narration Selected Without Provider-Specific Consent
Video narration defaults to auto and selects ElevenLabs whenever ELEVENLABS_API_KEY exists. A video request can therefore send private narration externally without a provider-specific choice.
The instructions require a video request but no cloud-provider confirmation. pickProvider chooses ElevenLabs from an ambient key before considering system speech.
Elementos de revisión de capacidades (4)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto
Generic API/secret keys
const headers = { "content-type": "application/json", ...env.AM_TTS_API_KEY ? { authorization: `Bear
The optional AM_TTS_API_KEY is sent to an unrestricted configured URL. Plaintext remote HTTP can disclose the token and narration.
Medio
Hardcoded IP address
var LAN_BIND = "0.0.0.0";
The optional LAN mode binds 0.0.0.0 and serves capability URLs over HTTP. Network observers can capture links and read shared private pages.
Bajo
Fetch API call
res = await fetch(url, {
localSpeech posts narration and optional Bearer credentials to AM_TTS_URL without transport restrictions. A remote HTTP endpoint exposes this data in transit.
Bajo
HTTP client library
const samples = trimSilence(await request(text2));
request(text2) invokes localSpeech against the configured endpoint. Its URL lacks HTTPS or loopback enforcement, so narration can cross an unencrypted remote connection.

Factores de riesgo

📁 Acceso al sistema de archivos (50)
🔑 Variables de entorno (21)
⚡ Contiene scripts (49)
⚙️ Comandos externos (50)
🌐 Acceso a red (37)
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/qingyuna-answer-me-with-html/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/qingyuna-answer-me-with-html/security.svg)](https://skillstore.io/skills/qingyuna-answer-me-with-html?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/qingyuna-answer-me-with-html?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/qingyuna-answer-me-with-html/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/qingyuna-answer-me-with-html.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

qingyuna. (2026). answer-me-with-html security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/qingyuna-answer-me-with-html/audits/1

Cita BibTeX

@techreport{qingyuna-qingyuna-answer-me-with-html-2026, author = {qingyuna}, title = {answer-me-with-html security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/qingyuna-answer-me-with-html/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "answer-me-with-html security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "qingyuna" date-released: "2026-10-29" url: "https://skillstore.io/skills/qingyuna-answer-me-with-html/audits/1" identifiers: - type: other value: "skillstore:qingyuna-answer-me-with-html:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
64
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación

Lo que puedes crear

Explain Request Flows

Show request paths, service relationships, and state changes with diagrams and selected code excerpts.

Compare Product Options

Present decision criteria, trade-offs, and open questions in a visual comparison page.

Prepare Technical Lessons

Convert a structured lesson into scenes with diagrams, captions, and explicitly selected narration.

Prueba estos prompts

Create a First Explainer
Explain [topic] as one HTML page with a conclusion, one diagram, and a short comparison table. Do not open the browser automatically.
Compare Alternatives
Compare [option A] and [option B] across [criteria]. Create an HTML page with evidence, trade-offs, and one decision question.
Document Existing Architecture
Explain [workspace subsystem] with a request-flow diagram and selected code excerpts. Cite real files and identify private content before sharing the HTML.
Build an Offline Lesson
Create a four-scene video explaining [process]. Use recurring diagram labels, subtitles, and voice off. Keep the player local and report export prerequisites.

Mejores prácticas

  • Use one question per panel and place the core conclusion before supporting evidence.
  • Review embedded code and images before sharing a page or enabling network access.
  • Select voice off or system speech for private narration unless cloud processing is explicitly approved.

Evitar

  • Do not use charts with invented numbers or present sketches as verified project code.
  • Do not treat reader comments or unanswered suggested options as authorization to run commands.
  • Do not send credentials through remote HTTP speech endpoints or share private page links over untrusted networks.

Preguntas frecuentes

Which assistants can use this skill?
The instructions cover Claude, Claude Code, and Codex. Hosts without CLAUDE_SKILL_DIR substitution must use the actual skill directory path.
Does page generation need dependency installation?
The bundled CLI needs Node.js 20 or newer. Ordinary page rendering does not require installing additional Node packages.
Where are generated pages stored?
Pages normally use the application data directory. Output flags can select a workspace file, and restricted writes can trigger private temporary storage.
Does it work without network access?
Local page rendering can work offline. Disable update checks and avoid remote themes and cloud narration when network access is prohibited.
Can narration send text to external services?
Yes. Auto voice selects ElevenLabs when its API key exists. Use voice off or system speech to avoid that cloud upload.
Can I safely share every generated page?
No. Review embedded content first. Optional LAN sharing uses HTTP, and anyone holding a valid page link can access that page.

Detalles del desarrollador

Autor

qingyuna

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Ref.

747cc4a202a58444d48f42de73cfce79288af501

Actualidad del mantenimiento

29/10/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

Ver todo