スキル explainer-default
📦
explainer-default
コンテンツリビジョン r1 中リスク 📁 ファイルシステムへのアクセス⚙️ 外部コマンド🌐 ネットワークアクセス🔑 環境変数
Create Product Explainer Videos with Music
Software teams need clear product demonstrations without recording every interface interaction. This skill guides editable HTML animations and MP4 rendering with music and motion blur.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "explainer-default" from https://skillstore.io/skills/barty-bart-explainer-default.md and its manifest at https://skillstore.io/api/skills/barty-bart-explainer-default/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「explainer-default」を使用しています。 Plan a 60-second demo for a task manager with capture, assignment, and progress tracking.
期待される結果:
- 0-5 seconds: introduce the product name.
- 5-10 seconds: present the task coordination problem.
- 10-40 seconds: show capture, assignment, and progress tracking in three interface chapters.
- 40-57 seconds: summarize the workflow and show the supplied call to action.
- 57-60 seconds: hold the product name on the closing screen.
「explainer-default」を使用しています。 Prepare review materials before exporting the final video.
期待される結果:
- Review package: editable HTML preview, contact sheet, and draft MP4.
- Review notes: check text clipping, interface accuracy, camera framing, pacing, and audio balance.
- Final package after approval: motion-blurred MP4 with audio and a separate silent copy.
セキュリティ監査
中リスクv1 • 2026/10/20 バージョン別レポートを開く
Most static alerts are Markdown formatting, expected rendering operations, or audio serialization; no evidence of credential theft or prompt injection was found. Confirmed risks involve deleting existing frame directories and injecting entries through unescaped FFmpeg manifest paths. A separate semantic finding identifies unnecessary cross-file browser access when rendering untrusted HTML.
2
スキャンされたファイル
267
解析済み行数
2
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (1)
中
Unnecessary Cross-File Browser Access
Chromium launches with --allow-file-access-from-files before loading the selected local HTML. Untrusted page scripts could read other local files and disclose accessible data.
The flag explicitly relaxes local-file origin restrictions, and no request filtering is configured. Exploitation requires untrusted rendered HTML; no malicious page is included.
機能レビュー項目 (2)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
中
Synchronous file operations
for (let i = 0; i < times.length; i++) writeFileSync(`${dir}/${String(i).padStart(3, '0')}.jpg`, awa
Frames use a predictable output-derived directory that mkdirSync permits to exist. Recursive cleanup at line 188 deletes any unrelated contents already inside.
中
Synchronous file operations
writeFileSync(list, segs.filter(Boolean).map(s => `file '${path.resolve(s)}'`).join('\n'));
Output-derived paths enter single-quoted concat entries without escaping quotes or newlines. Crafted filenames can inject manifest directives, while line 215 disables safe-path checks.
リスク要因
📁 ファイルシステムへのアクセス (6)
⚙️ 外部コマンド (40)
SKILL.md:146 SKILL.md:153 SKILL.md:201 SKILL.md:48 SKILL.md:49 SKILL.md:51 SKILL.md:52 SKILL.md:54 SKILL.md:55 SKILL.md:56 SKILL.md:62 SKILL.md:66 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:90-107 SKILL.md:107-109 SKILL.md:109 SKILL.md:110 SKILL.md:113 SKILL.md:114-116 SKILL.md:116-127 SKILL.md:127-133 SKILL.md:133 SKILL.md:135-136 SKILL.md:136-137 SKILL.md:137 SKILL.md:140-184 SKILL.md:184-187 SKILL.md:187 SKILL.md:194-199 SKILL.md:199-209 SKILL.md:209-214 SKILL.md:214-217 SKILL.md:217-238
🌐 ネットワークアクセス (1)
🔑 環境変数 (2)
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/barty-bart-explainer-default/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/barty-bart-explainer-default?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/barty-bart-explainer-default?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-explainer-default/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/barty-bart-explainer-default.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
barty-bart. (2026). explainer-default security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-explainer-default/audits/1BibTeX形式の引用
@techreport{barty-bart-barty-bart-explainer-default-2026,
author = {barty-bart},
title = {explainer-default security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/barty-bart-explainer-default/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "explainer-default security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-explainer-default/audits/1"
identifiers:
- type: other
value: "skillstore:barty-bart-explainer-default:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
83
仕様準拠
作成できるもの
Prepare a Product Launch
Turn an approved product brief into a one-minute launch demonstration with branded interface scenes and a closing call to action.
Explain a Feature Workflow
Show several interface steps with readable labels, cursor actions, and timed results without recording a live application.
Build Editable Motion Assets
Create a deterministic HTML animation, review contact sheets, and refine the draft before exporting a motion-blurred final video.
これらのプロンプトを試す
Start a Simple Demo
Create a 60-second explainer for [product] using these facts: [facts]. Ask for missing essentials and use synthesized music.
Apply Brand Direction
Plan a 45-second portrait demo for [product]. Use [brand assets], show [three features], and end with this approved URL: [URL].
Review Before Final Rendering
Create a timed beat sheet, editable HTML, contact sheet, and draft for [product]. Wait for approval before the final render.
Refine a Detailed Workflow
Build a 90-second landscape demo from [approved brief]. Show [five workflow steps], use [music file], and flag placeholders before rendering.
ベストプラクティス
- Supply verified product facts, approved branding, and the exact workflow before scripting.
- Review contact sheets and a draft before starting the slower final render.
- Use trusted HTML and a dedicated output folder; address the documented renderer risks before processing external inputs.
回避
- Inventing customer counts, testimonials, offers, or integration support.
- Treating reconstructed interface scenes as proof of actual product behavior.
- Rendering untrusted HTML or reusing output paths that contain existing files.
よくある質問
Which AI tools are supported?
The skill provides instructions for Claude, Codex, and Claude Code. Rendering still requires the local dependencies.
What do I need to provide?
Provide the product name and description. A website, brand assets, feature list, and approved call to action improve accuracy.
What files can the workflow produce?
It can produce editable HTML, a contact sheet, draft MP4, final MP4 with audio, and a silent MP4.
Does it record my live application?
No. It rebuilds selected interface moments from product information and renders those animations.
Can I use my own music?
Yes. Supply a music file, or use the default synthesized soundtrack with interface sound effects.
Is the renderer suitable for untrusted files?
Not without hardening. It enables cross-file browser access, uses unescaped manifest paths, and recursively removes a predictable frame directory.
開発者情報
作成者
barty-bartライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
feef9bda10fa496f1261820ba72add6a4b03b3c6
メンテナンスの新しさ
2026/10/20
利用状況
2 ダウンロード · 0 閲覧