スキル extension-qr-code

📦

extension-qr-code

Name: extension-qr-code
Author: caffeinelabs

v0.1.4 コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド🌐 ネットワークアクセス

Build a React QR Code Scanner

Camera-based QR scanning requires coordinated camera controls, decoding state, history, and error handling. This skill provides a React hook contract and an implementation pattern for a usable scanner interface.

対応: Claude Codex Code(CC)

📊 72 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "extension-qr-code" from https://skillstore.io/skills/caffeinelabs-extension-qr-code.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-extension-qr-code/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/caffeinelabs-extension-qr-code.md 署名済み manifest GET /api/skills/caffeinelabs-extension-qr-code/manifest 署名済み lockfile GET /api/skills/caffeinelabs-extension-qr-code/lockfile

テストする

「extension-qr-code」を使用しています。 Create a basic scanner for a React inventory page.

期待される結果:

A scanner view with explicit start and stop controls, a live camera preview, and timestamped scan results.

「extension-qr-code」を使用しています。 Make the scanner suitable for mobile check-in.

期待される結果:

A responsive check-in scanner with rear-camera startup, camera switching, permission feedback, and a clear recent-results list.

「extension-qr-code」を使用しています。 Improve scanner reliability for a production application.

期待される結果:

A production plan covering trusted decoder loading, scan timing, error recovery, camera cleanup, accessibility, and unsupported-browser behavior.

セキュリティ監査

中リスク

v1 • 2026/7/24 バージョン別レポートを開く

The four shell execution detections are false positives caused by Markdown backticks, and the hardcoded URL is a documentation link. The documented jsQRUrl option permits remote decoder loading, creating a supply-chain risk if an untrusted URL is used. No prompt injection or malicious intent was found.

スキャンされたファイル

160

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (1)

中

SKILL.md:41-42

Configurable Remote Decoder Source

The configuration exposes jsQRUrl as the decoder library source. An untrusted value could load attacker-controlled script into the application.

The API comment explicitly describes remote library loading. The audited file does not include the package implementation or its URL validation.

リスク要因

⚙️ 外部コマンド (4)

SKILL.md:23 SKILL.md:25-86 SKILL.md:86-90 SKILL.md:90-157

🌐 ネットワークアクセス (1)

SKILL.md:13

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/caffeinelabs-extension-qr-code/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/caffeinelabs-extension-qr-code/security.svg)](https://skillstore.io/skills/caffeinelabs-extension-qr-code?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/caffeinelabs-extension-qr-code?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-extension-qr-code/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/caffeinelabs-extension-qr-code.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

caffeinelabs. (2026). extension-qr-code security audit report (audit version 1) [Author version 0.1.4]. Skillstore. https://skillstore.io/skills/caffeinelabs-extension-qr-code/audits/1

BibTeX形式の引用

@techreport{caffeinelabs-caffeinelabs-extension-qr-code-2026,
  author = {caffeinelabs},
  title = {extension-qr-code security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/caffeinelabs-extension-qr-code/audits/1},
  note = {Author version 0.1.4}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "extension-qr-code security audit report (audit version 1)"
version: "0.1.4"
type: report
authors:
  - name: "caffeinelabs"
date-released: "2026-07-24"
url: "https://skillstore.io/skills/caffeinelabs-extension-qr-code/audits/1"
identifiers:
  - type: other
    value: "skillstore:caffeinelabs-extension-qr-code:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

100

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Prototype Product Scanning

Create a React scanner that captures QR identifiers and displays recent results.

Support Mobile Camera Switching

Build a mobile scanner with rear-camera defaults, camera switching, and clear control states.

Add Check-In Scanning

Integrate QR capture into an attendance workflow while handling permissions and scanner errors.

これらのプロンプトを試す

Create a Basic Scanner

Create a React QR scanner using useQRScanner. Include video and canvas refs, start and stop buttons, and a simple results list.

Add Mobile Controls

Build a responsive mobile QR scanner. Add permission errors, loading states, camera switching, clear history, and disabled control states.

Integrate a Workflow

Integrate QR scanning into [workflow]. Validate decoded values, retain [count] results, and stop the camera after a successful scan.

Design a Production Flow

Design QR scanning for [application]. Cover decoder source policy, privacy, accessibility, lifecycle cleanup, performance tuning, and browser fallback behavior.

ベストプラクティス

Start the camera only after explicit user action, and stop it when scanning ends or the component unmounts.
Treat decoded QR contents as untrusted input before navigation, storage, or workflow actions.
Test permission denial, unsupported browsers, mobile camera switching, and repeated scan handling.

回避

Do not automatically open URLs or execute actions from decoded QR contents.
Do not leave the camera active after the scanner is hidden or the workflow completes.
Do not load the decoder from an untrusted or unversioned remote source.

よくある質問

Does this skill create QR codes?

No. It documents camera-based QR scanning and decoding.

Which React packages are required?

The skill targets the Caffeine AI QR code and camera packages.

Can users switch between cameras?

The hook exposes a switch action, but behavior depends on available cameras and browser support.

Can I control scanning frequency?

Yes. Configure scanInterval in milliseconds and balance responsiveness against device workload.

Does scanning require network access?

The decoder may load from a CDN. Use only trusted decoder sources approved for your application.

How should camera errors be handled?

Display the hook error, keep controls disabled during loading, and offer retry behavior when appropriate.

開発者情報

作成者

caffeinelabs

ライセンス

MIT

作者バージョン

v0.1.4

Skillstore リビジョン

リポジトリ

https://github.com/caffeinelabs/skills/tree/56c60e7a2cd2a8abebe0cc93eec429339fff42e2/skills/extension-qr-code

参照

a39a91716eadede5f4cdefd78178fed4e837a128

メンテナンスの新しさ

2026/7/24

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

📄 SKILL.md