스킬 explainer-default
📦
explainer-default
콘텐츠 리비전 r1 중간 위험 📁 파일 시스템 접근⚙️ 외부 명령어🌐 네트워크 접근🔑 환경 변수
Create Product Explainer Videos with Music
Software teams need clear product demonstrations without recording every interface interaction. This skill guides editable HTML animations and MP4 rendering with music and motion blur.
지원: Claude Codex Code(CC)
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "explainer-default" from https://skillstore.io/skills/barty-bart-explainer-default.md and its manifest at https://skillstore.io/api/skills/barty-bart-explainer-default/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"explainer-default" 사용 중입니다. Plan a 60-second demo for a task manager with capture, assignment, and progress tracking.
예상 결과:
- 0-5 seconds: introduce the product name.
- 5-10 seconds: present the task coordination problem.
- 10-40 seconds: show capture, assignment, and progress tracking in three interface chapters.
- 40-57 seconds: summarize the workflow and show the supplied call to action.
- 57-60 seconds: hold the product name on the closing screen.
"explainer-default" 사용 중입니다. Prepare review materials before exporting the final video.
예상 결과:
- Review package: editable HTML preview, contact sheet, and draft MP4.
- Review notes: check text clipping, interface accuracy, camera framing, pacing, and audio balance.
- Final package after approval: motion-blurred MP4 with audio and a separate silent copy.
보안 감사
중간 위험v1 • 2026. 10. 20. 버전별 보고서 열기
Most static alerts are Markdown formatting, expected rendering operations, or audio serialization; no evidence of credential theft or prompt injection was found. Confirmed risks involve deleting existing frame directories and injecting entries through unescaped FFmpeg manifest paths. A separate semantic finding identifies unnecessary cross-file browser access when rendering untrusted HTML.
2
스캔된 파일
267
분석된 줄 수
2
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (1)
중간
Unnecessary Cross-File Browser Access
Chromium launches with --allow-file-access-from-files before loading the selected local HTML. Untrusted page scripts could read other local files and disclose accessible data.
The flag explicitly relaxes local-file origin restrictions, and no request filtering is configured. Exploitation requires untrusted rendered HTML; no malicious page is included.
기능 검토 항목 (2)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
중간
Synchronous file operations
for (let i = 0; i < times.length; i++) writeFileSync(`${dir}/${String(i).padStart(3, '0')}.jpg`, awa
Frames use a predictable output-derived directory that mkdirSync permits to exist. Recursive cleanup at line 188 deletes any unrelated contents already inside.
중간
Synchronous file operations
writeFileSync(list, segs.filter(Boolean).map(s => `file '${path.resolve(s)}'`).join('\n'));
Output-derived paths enter single-quoted concat entries without escaping quotes or newlines. Crafted filenames can inject manifest directives, while line 215 disables safe-path checks.
위험 요인
📁 파일 시스템 접근 (6)
⚙️ 외부 명령어 (40)
SKILL.md:146 SKILL.md:153 SKILL.md:201 SKILL.md:48 SKILL.md:49 SKILL.md:51 SKILL.md:52 SKILL.md:54 SKILL.md:55 SKILL.md:56 SKILL.md:62 SKILL.md:66 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:90-107 SKILL.md:107-109 SKILL.md:109 SKILL.md:110 SKILL.md:113 SKILL.md:114-116 SKILL.md:116-127 SKILL.md:127-133 SKILL.md:133 SKILL.md:135-136 SKILL.md:136-137 SKILL.md:137 SKILL.md:140-184 SKILL.md:184-187 SKILL.md:187 SKILL.md:194-199 SKILL.md:199-209 SKILL.md:209-214 SKILL.md:214-217 SKILL.md:217-238
🌐 네트워크 접근 (1)
🔑 환경 변수 (2)
감사자: codex
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/barty-bart-explainer-default/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/barty-bart-explainer-default?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/barty-bart-explainer-default?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-explainer-default/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/barty-bart-explainer-default.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
barty-bart. (2026). explainer-default security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-explainer-default/audits/1BibTeX 인용
@techreport{barty-bart-barty-bart-explainer-default-2026,
author = {barty-bart},
title = {explainer-default security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/barty-bart-explainer-default/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "explainer-default security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-explainer-default/audits/1"
identifiers:
- type: other
value: "skillstore:barty-bart-explainer-default:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 55
아키텍처
85
유지보수성
87
콘텐츠
65
커뮤니티
83
사양 준수
만들 수 있는 것
Prepare a Product Launch
Turn an approved product brief into a one-minute launch demonstration with branded interface scenes and a closing call to action.
Explain a Feature Workflow
Show several interface steps with readable labels, cursor actions, and timed results without recording a live application.
Build Editable Motion Assets
Create a deterministic HTML animation, review contact sheets, and refine the draft before exporting a motion-blurred final video.
이 프롬프트를 사용해 보세요
Start a Simple Demo
Create a 60-second explainer for [product] using these facts: [facts]. Ask for missing essentials and use synthesized music.
Apply Brand Direction
Plan a 45-second portrait demo for [product]. Use [brand assets], show [three features], and end with this approved URL: [URL].
Review Before Final Rendering
Create a timed beat sheet, editable HTML, contact sheet, and draft for [product]. Wait for approval before the final render.
Refine a Detailed Workflow
Build a 90-second landscape demo from [approved brief]. Show [five workflow steps], use [music file], and flag placeholders before rendering.
모범 사례
- Supply verified product facts, approved branding, and the exact workflow before scripting.
- Review contact sheets and a draft before starting the slower final render.
- Use trusted HTML and a dedicated output folder; address the documented renderer risks before processing external inputs.
피하기
- Inventing customer counts, testimonials, offers, or integration support.
- Treating reconstructed interface scenes as proof of actual product behavior.
- Rendering untrusted HTML or reusing output paths that contain existing files.
자주 묻는 질문
Which AI tools are supported?
The skill provides instructions for Claude, Codex, and Claude Code. Rendering still requires the local dependencies.
What do I need to provide?
Provide the product name and description. A website, brand assets, feature list, and approved call to action improve accuracy.
What files can the workflow produce?
It can produce editable HTML, a contact sheet, draft MP4, final MP4 with audio, and a silent MP4.
Does it record my live application?
No. It rebuilds selected interface moments from product information and renders those animations.
Can I use my own music?
Yes. Supply a music file, or use the default synthesized soundtrack with interface sound effects.
Is the renderer suitable for untrusted files?
Not without hardening. It enables cross-file browser access, uses unescaped manifest paths, and recursively removes a predictable frame directory.
개발자 세부 정보
작성자
barty-bart라이선스
MIT
Skillstore 리비전
r1
버전 안내
작성자가 버전을 선언하지 않았습니다.
참조
feef9bda10fa496f1261820ba72add6a4b03b3c6
유지보수 최신성
2026. 10. 20.
사용량
3 다운로드 · 0 조회