📦

core

Name: core
Author: vercel-labs

コンテンツリビジョン r1 安全 ⚙️ 外部コマンド🔑 環境変数

Build Typed UI Specifications with json-render

AI-generated interfaces need consistent schemas, state bindings, and validation. This skill guides assistants through json-render core APIs for catalogs, prompts, streaming, and specification repair.

対応: Claude Codex Code(CC)

🥉 78 ブロンズ

Maintain this Skill? Claim it 🥉 78 ブロンズ

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "core" from https://skillstore.io/skills/vercel-labs-core.md and its manifest at https://skillstore.io/api/skills/vercel-labs-core/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/vercel-labs-core.md 署名済み manifest GET /api/skills/vercel-labs-core/manifest 署名済み lockfile GET /api/skills/vercel-labs-core/lockfile

テストする

「core」を使用しています。 Explain how to connect an email field to nested form state.

期待される結果:

Bind the input value to the nested email path using a two-way state binding.
Read that same nested path in the submit action binding.
A bare email field name does not search nested form state.
Validate and authorize the action in the application handler.

「core」を使用しています。 Describe a cautious repair workflow for a generated specification.

期待される結果:

Run structural validation and inspect each reported issue.
Apply lossless fixes first and retry generation when required.
Review lossy fixes before pruning dangling child references.
Validate the repaired specification again before rendering.

「core」を使用しています。 Explain what information the experimental evaluator receives.

期待される結果:

The evaluator receives candidate descriptions, prompts, instructions, topology, and explicit context.
Initial state and raw property or binding values are not sent automatically.
Keep Gateway credentials on the server and exclude sensitive information from descriptions and context.

セキュリティ監査

安全

v1 • 2026/9/29 バージョン別レポートを開く

All 88 static findings are false positives: Markdown delimiters, documented server-side authentication, and application-state terminology do not establish the reported threats. No evidence found of prompt injection, unauthorized credential disclosure, or shell execution in SKILL.md. Evaluator requests intentionally transmit described composition inputs; downstream package implementations were not included in this review.

スキャンされたファイル

296

解析済み行数

レビュー項目

誤検知を無視

リスク要因

⚙️ 外部コマンド (50)

🔑 環境変数 (3)

SKILL.md:21 SKILL.md:21 SKILL.md:21

最新の完了済み静的・セマンティック監査では、確認済みのセキュリティ検出事項は見つかりませんでした。これは、スキルに副作用がないことを証明するものではありません。

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/vercel-labs-core/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/vercel-labs-core/security.svg)](https://skillstore.io/skills/vercel-labs-core?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/vercel-labs-core?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vercel-labs-core/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/vercel-labs-core.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

vercel-labs. (2026). core security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vercel-labs-core/audits/1

BibTeX形式の引用

@techreport{vercel-labs-vercel-labs-core-2026,
  author = {vercel-labs},
  title = {core security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/vercel-labs-core/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "core security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "vercel-labs"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/vercel-labs-core/audits/1"
identifiers:
  - type: other
    value: "skillstore:vercel-labs-core:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Define a reusable component catalog

Frontend developers can structure component properties and catalog prompts for consistent AI-generated interfaces.

Integrate progressive specification generation

AI application engineers can plan JSONL streaming, refinement prompts, and validation before rendering generated specifications.

Connect forms to shared state

Design system maintainers can standardize form bindings, visibility rules, validation checks, and external state store adapters.

これらのプロンプトを試す

Understand the core concepts

Explain schemas, catalogs, specifications, and SpecStream in json-render. Use a small contact form as the example and identify the packages I need.

Create a typed catalog

Define a json-render schema and catalog for Button and TextInput components. Include Zod property constraints and show how catalog.prompt generates instructions.

Review form bindings and repairs

Review my supplied form specification for state binding, visibility, and cross-field validation issues. Propose lossless repairs first and explain any changes requiring lossy fixes.

Plan bounded experimental composition

Design server-side experimental composition using my supplied catalog and atomic candidates. Include batch creation, sequential edits, evaluation budgets, cancellation, and partial snapshot handling. Identify evaluator data exposure and runtime action authorization requirements.

ベストプラクティス

Validate generated specifications and review lossy repairs before rendering; separately validate and authorize runtime actions.
Keep evaluator credentials server-side and minimize sensitive data in descriptions, prompts, and explicit context.
Pin experimental package versions when published, set evaluation limits, and supply an overall abort signal.

回避

Treating schema validation as proof of semantic completeness or permission to execute actions.
Using repeat, watch, computed, template, or conditional properties in the experimental composition subset.
Assuming a catalog alone supplies configured candidate values, bindings, and rendering implementations.

よくある質問

Which assistants can use this skill?

The marketplace lists Claude, Codex, and Claude Code. The skill provides Markdown guidance and TypeScript examples rather than a standalone executable.

Does this skill install json-render or render an interface?

No. It guides core API usage; your project must provide dependencies, rendering components, and application integration.

Are the experimental composition APIs stable?

No. The documentation describes them as unreleased, requiring a source build until publication. Experimental exports and types may change in any release.

What information leaves the application during Gateway evaluation?

Descriptions, prompts, instructions, topology, and explicit context reach the evaluator. Initial state and raw property or binding values are not sent automatically.

What should I check when form values do not resolve?

Use explicit paths for nested state and bind the natural input value property. A bare field name does not search nested form objects.

Does specification validation secure action execution?

No. Applications must validate and authorize actions at runtime. Built-ins without parameter schemas receive name validation only during experimental composition.

開発者情報

作成者

vercel-labs

ライセンス

MIT

Skillstore リビジョン

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/vercel-labs/json-render/tree/c2600d73908ed505e6d726f5b6f969ba8f597ce7/skills/core

参照

bad9dafc37d1638cd29cb9bab06d5f8dbcd0f6c2

メンテナンスの新しさ

2026/9/30

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

📄 SKILL.md