スキル baoyu-markdown-to-html

📦

baoyu-markdown-to-html

Name: baoyu-markdown-to-html
Author: jimliu

コンテンツリビジョン r1 高リスク ⚙️ 外部コマンド📁 ファイルシステムへのアクセス⚡ スクリプトを含む🌐 ネットワークアクセス🔑 環境変数

Markdownをスタイル付きHTMLに変換

MarkdownをWeChat互換HTMLとして公開するには、慎重なフォーマットとインラインスタイルが必要になる場合があります。このスキルは、Markdownファイルを、図、数式、アラート、コードハイライトを含むテーマ付きHTMLに変換します。

対応: Claude Codex Code(CC)

⚠️ 38 不十分

Maintain this Skill? Claim it ⚠️ 38 不十分

このスキルはパックに含まれています

タスクに必要なすべてのスキルを、パックごと 1 コマンドでインストールできます。

Docsパブリッシングキット · 3 スキルパック全体をインストール

インストール前に停止して確認を求めてください。

計画を確認し、ファイルを変更する前にユーザーの明示的な同意を得てください。

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "baoyu-markdown-to-html" from https://skillstore.io/skills/jimliu-baoyu-markdown-to-html.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-markdown-to-html/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/jimliu-baoyu-markdown-to-html.md 署名済み manifest GET /api/skills/jimliu-baoyu-markdown-to-html/manifest 署名済み lockfile GET /api/skills/jimliu-baoyu-markdown-to-html/lockfile

テストする

「baoyu-markdown-to-html」を使用しています。 frontmatter、見出し、コードブロック、アラート、ローカル画像を含むMarkdown記事。

期待される結果:

Markdownファイルの隣に、テーマ付きスタイルと画像マッピングの一覧を含むHTML記事が作成されます。

「baoyu-markdown-to-html」を使用しています。 Mermaid、PlantUML、数式、脚注を含む技術ガイド。

期待される結果:

ガイドは、図のプレースホルダー、整形された数式、ハイライトされたコード、脚注セクションを含むスタイル付きHTMLとしてレンダリングされます。

「baoyu-markdown-to-html」を使用しています。変換前に既存のarticle.htmlが存在します。

期待される結果:

以前のHTMLファイルがタイムスタンプ付きでバックアップされ、その後、新しいテーマ付きHTMLファイルが書き込まれます。

セキュリティ監査

高リスク

v4 • 2026/7/5 バージョン別レポートを開く

Confirmed risks include external npx/Bun execution, broad local file reads and writes, remote resource fetching, remote dynamic imports, and unsafe HTML insertion surfaces. Most backtick, regex exec, SVG coordinate, CSS border, and JSFuck heuristic hits are false positives from normal TypeScript and markup. No evidence of prompt injection text was found in SKILL.md or the scanned scripts.

スキャンされたファイル

3,739

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (3)

高

scripts/md/render.ts:395-414 scripts/md/extensions/ruby.ts:91-120 scripts/md/extensions/slider.ts:57-60

Unsanitized Markdown HTML Output

Markdown-derived values are interpolated into HTML attributes and element bodies without consistent escaping. Malicious Markdown can produce active HTML when the output is opened or pasted into a privileged editor.

The renderer directly interpolates href, title, alt, ruby text, and slider captions into HTML strings. I did not find a sanitizer applied before the final HTML is written.

高

scripts/main.ts:80-89 scripts/main.ts:229-236

User-Controlled Remote Resource Fetching

Markdown image URLs beginning with http or https are downloaded during conversion. This can disclose network metadata or fetch attacker-controlled content when converting untrusted Markdown.

The code explicitly branches on http and https image paths, downloads them, and reports local mappings. The URL originates from Markdown image syntax collected earlier in the conversion.

高

scripts/md/render.ts:349-353 scripts/md/utils/languages.ts:80-112 scripts/md/utils/languages.ts:191-205

Remote Dynamic Import from Markdown Language Names

Unknown code block languages can be carried into a pending language attribute and later used to build a CDN import URL. This can load remote JavaScript based on document content.

The renderer stores an unregistered language name in HTML attributes, and the utility later imports grammarUrlFor(language). The exact caller path is browser-dependent, so confidence is high but not absolute.

機能レビュー項目 (52)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高

scripts/main.ts:9

Node.js child_process module

import { spawnSync } from 'node:child_process';

The file imports node:child_process and the module is used later to invoke npx. This is real external command capability in the skill runtime.

高

scripts/main.ts:203

Synchronous spawn

const result = spawnSync('npx', args, {

spawnSync executes npx with Bun to run the renderer. The arguments are mostly controlled, but it still executes an external toolchain from the skill.

高

scripts/md/extensions/plantuml.ts:170

outerHTML assignment (XSS risk)

placeholderElement.outerHTML = createPlantUMLHTML(imageUrl, options, svgContent)

PlantUML inline rendering replaces an element with HTML built from fetched SVG content. Embedding remote SVG through outerHTML is a real injection surface.

高

scripts/md/utils/languages.ts:112

Dynamic import() expression

const module = await import(/* @vite-ignore */ grammarUrlFor(language))

The language highlighter dynamically imports a module URL built from a language name. If the language comes from Markdown, this can load remote code from the configured CDN.

中

scripts/main.ts:42

Node.js fs operations

fs.unlinkSync(destPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:50

Node.js fs operations

fs.unlinkSync(destPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:64

Node.js fs operations

fs.unlink(destPath, () => {});

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:123

Node.js fs operations

const content = fs.readFileSync(markdownPath, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:224

Node.js fs operations

fs.renameSync(finalHtmlPath, backupPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:227

Node.js fs operations

fs.copyFileSync(tempHtmlPath, finalHtmlPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:239

Node.js fs operations

let htmlContent = fs.readFileSync(finalHtmlPath, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:244

Node.js fs operations

fs.writeFileSync(finalHtmlPath, htmlContent, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:123

Synchronous file operations

const content = fs.readFileSync(markdownPath, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/main.ts:239

Synchronous file operations

let htmlContent = fs.readFileSync(finalHtmlPath, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/main.ts:244

Synchronous file operations

fs.writeFileSync(finalHtmlPath, htmlContent, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/main.ts:35

File stream creation

const file = fs.createWriteStream(destPath);

The code creates a writable file stream for downloaded image content. This is real file creation based on conversion inputs.

中

scripts/main.ts:190

Temp directory access

const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'markdown-to-html-'));

The converter creates a temporary directory under the OS temp path and stores intermediate Markdown and assets there. Sensitive input could remain outside the project directory.

中

scripts/md/extensions/infographic.ts:77

innerHTML assignment (XSS risk)

container.innerHTML = `<div style="color: red; padding: 10px; border: 1px solid red;">Infographic 渲染

The catch block writes an error message into innerHTML. Error text may include untrusted content, so this is a plausible DOM injection risk.

中

scripts/md/extensions/plantuml.ts:193

Fetch API call

const response = await fetch(svgUrl)

fetch retrieves PlantUML SVG content from the generated diagram URL. This is real outbound network access during inline diagram rendering.

中

scripts/md/extensions/plantuml.ts:241

Hardcoded URL

serverUrl: options.serverUrl || `https://www.plantuml.com/plantuml`,

This is the default PlantUML server used for diagram rendering. Markdown diagrams can cause requests to this external service.

中

scripts/md/render.ts:81

Node.js fs operations

const content = fs.readFileSync(configPath, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:677

Node.js fs operations

baseCss: fs.readFileSync(basePath, "utf-8"),

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:678

Node.js fs operations

themeCss: fs.readFileSync(themePath, "utf-8"),

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:829

Node.js fs operations

const markdown = fs.readFileSync(inputPath, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:865

Node.js fs operations

fs.renameSync(outputPath, backupPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:868

Node.js fs operations

fs.writeFileSync(outputPath, finalHtml, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:81

Synchronous file operations

const content = fs.readFileSync(configPath, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/render.ts:677

Synchronous file operations

baseCss: fs.readFileSync(basePath, "utf-8"),

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/render.ts:678

Synchronous file operations

themeCss: fs.readFileSync(themePath, "utf-8"),

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/render.ts:829

Synchronous file operations

const markdown = fs.readFileSync(inputPath, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/render.ts:868

Synchronous file operations

fs.writeFileSync(outputPath, finalHtml, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/utils/languages.ts:202

innerHTML assignment (XSS risk)

codeBlock.innerHTML = highlighted

The highlighter writes generated HTML into a code element with innerHTML. highlight.js usually escapes code, but this remains a DOM insertion sink.

中

scripts/md/utils/languages.ts:80

Hardcoded URL

const HLJS_CDN_BASE = `https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/${HLJS_VERSION

This URL is the CDN base used by dynamic language loading. It can be contacted when loading additional highlight.js grammars.

中

SKILL.md:27

Hidden file access

test -f "$HOME/.baoyu-skills/baoyu-markdown-to-html/EXTEND.md" && echo "user"

SKILL.md instructs the agent to check a hidden .baoyu-skills EXTEND.md path, including a user-home location. This is intentional configuration access but reaches hidden files.

中

SKILL.md:35

Hidden file access

│ $HOME/.baoyu-skills/baoyu-markdown-to-html/EXTEND.md │ User home │

SKILL.md instructs the agent to check a hidden .baoyu-skills EXTEND.md path, including a user-home location. This is intentional configuration access but reaches hidden files.

低

scripts/main.ts:86

Node.js fs stat operations

if (!fs.existsSync(localPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/main.ts:214

Node.js fs stat operations

if (!fs.existsSync(tempHtmlPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/main.ts:221

Node.js fs stat operations

if (fs.existsSync(finalHtmlPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/main.ts:321

Node.js fs stat operations

if (!fs.existsSync(markdownPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/main.ts:190

Temp file creation

const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'markdown-to-html-'));

The same temp directory is used for generated intermediate files. This is expected but can leave temporary copies of source content.

低

scripts/md/render.ts:67

Node.js fs stat operations

if (!fs.existsSync(dir)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:78

Node.js fs stat operations

if (!fs.existsSync(configPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:101

Node.js fs stat operations

fs.existsSync(path.join(THEME_DIR, `${name}.css`))

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:102

Node.js fs stat operations

|| fs.existsSync(path.join(EXTERNAL_THEME_DIR, `${name}.css`))

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:658

Node.js fs stat operations

fs.existsSync(candidate)

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:661

Node.js fs stat operations

fs.existsSync(candidate)

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:817

Node.js fs stat operations

if (!fs.existsSync(inputPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:863

Node.js fs stat operations

if (fs.existsSync(outputPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:36

Environment variable access (dot notation)

process.env.MD_THEME_CONFIG_PATH

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

低

scripts/md/render.ts:39

Environment variable access (dot notation)

process.env.MD_THEME_DIR

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

低

scripts/md/render.ts:36

Environment variable object

process.env.MD_THEME_CONFIG_PATH

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

低

scripts/md/render.ts:39

Environment variable object

process.env.MD_THEME_DIR

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

リスク要因

⚙️ 外部コマンド (366)

📁 ファイルシステムへのアクセス (46)

⚡ スクリプトを含む (16)

🌐 ネットワークアクセス (32)

🔑 環境変数 (4)

scripts/md/render.ts:36 scripts/md/render.ts:39 scripts/md/render.ts:36 scripts/md/render.ts:39

監査者: codex 監査履歴を表示 →

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/jimliu-baoyu-markdown-to-html/security.svg)](https://skillstore.io/skills/jimliu-baoyu-markdown-to-html?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/jimliu-baoyu-markdown-to-html?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-markdown-to-html/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-markdown-to-html.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

jimliu. (2026). baoyu-markdown-to-html security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4

BibTeX形式の引用

@techreport{jimliu-jimliu-baoyu-markdown-to-html-2026,
  author = {jimliu},
  title = {baoyu-markdown-to-html security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-markdown-to-html security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "jimliu"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4"
identifiers:
  - type: other
    value: "skillstore:jimliu-baoyu-markdown-to-html:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 高

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

WeChat記事を準備

完成したMarkdown記事を、公開ワークフローに貼り付けるのに適したスタイル付きHTMLに変換します。

技術ガイドを公開

開発者教育向けに、コードブロック、図、アラート、数式を一貫したHTMLスタイルでレンダリングします。

ドキュメント下書きを整形

frontmatterと画像を含むMarkdown下書きを、レビュー済みのHTML成果物に変換します。

これらのプロンプトを試す

1つのファイルを変換

article.mdをdefaultテーマのスタイル付きHTMLに変換してください。出力パスとバックアップパスがあれば報告してください。

テーマを使用

draft.mdをgraceテーマで変換してください。レンダリングされたコンテンツ内の最初の見出しを保持してください。

公開用下書きを準備

post.mdをHTMLに変換し、frontmatterのタイトルを使用して、確認が必要な画像マッピングを一覧表示してください。

技術記事をレンダリング

図、数式、アラート、コードブロックを含むguide.mdを変換してください。simpleテーマを使用し、既存の出力バックアップを保持してください。

ベストプラクティス

変換前に、信頼できないソースからのMarkdownを確認してください。
ネットワークアクセスが不要な場合は、ローカル画像を使用してください。
出力の変更を繰り返さないよう、変換前にテーマを選択してください。

回避

一時ファイルを確認せずに、共有マシン上で秘密または非公開のMarkdownを変換しないでください。
信頼できないMarkdownから生成されたHTMLを、特権のあるWebページに貼り付けないでください。
オフライン公開でリモートの図や画像に依存しないでください。

よくある質問

このスキルは何を生成しますか？

Markdown入力ファイルからスタイル付きHTMLファイルを生成します。

どのツールで使用できますか？

レポートには、サポート対象ツールとしてClaude、Codex、Claude Codeが記載されています。

どのテーマが含まれていますか？

このスキルではdefault、grace、simpleテーマが文書化されています。

図をサポートしていますか？

はい。MermaidとPlantUMLの図ブロックのサポートが含まれています。

HTMLはどこに保存されますか？

HTMLファイルは、Markdown入力と同じディレクトリに保存されます。

信頼できないMarkdownに対して安全ですか？

いいえ。信頼できないMarkdownからの出力を使用する前に、追加のサニタイズが必要です。

開発者情報

作成者

jimliu

ライセンス

MIT

Skillstore リビジョン

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/jimliu/baoyu-skills/tree/main/skills/baoyu-markdown-to-html/

参照

a25199bc7d6b82598536822d1738eb5d5f54025b

メンテナンスの新しさ

2026/7/20

利用状況

14 ダウンロード · 221 閲覧

ファイル構成

📁 scripts/

📁 md/

📁 extensions/

📄 alert.ts

📄 footnotes.ts

📄 index.ts

📄 infographic.ts

📄 katex.ts

📄 markup.ts

📄 plantuml.ts

📄 ruby.ts

📄 slider.ts

📄 toc.ts

📁 themes/

📄 base.css

📄 default.css

📄 grace.css

📄 simple.css

📁 utils/

📄 languages.ts

📄 LICENSE

📄 package.json

📄 render.ts

📄 main.ts

📄 SKILL.md