스킬 hairline-create

📦

hairline-create

Name: hairline-create
Author: lucasmarkes

콘텐츠 리비전 r1 중간 위험 ⚙️ 외부 명령어⚡ 스크립트 포함📁 파일 시스템 접근🔑 환경 변수🌐 네트워크 접근

Create Interactive Hairline Figures

Interactive line illustrations require consistent geometry, motion, and visual checks. This skill guides concept selection, builds a standalone HTML figure, and checks its structure and appearance.

지원: Claude Codex Code(CC)

📊 70 적절함

Maintain this Skill? Claim it 📊 70 적절함

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "hairline-create" from https://skillstore.io/skills/lucasmarkes-hairline-create.md and its manifest at https://skillstore.io/api/skills/lucasmarkes-hairline-create/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/lucasmarkes-hairline-create.md 서명된 manifest GET /api/skills/lucasmarkes-hairline-create/manifest 서명된 lockfile GET /api/skills/lucasmarkes-hairline-create/lockfile

테스트해 보기

"hairline-create" 사용 중입니다. Suggest a Hairline metaphor for a deployment pipeline.

예상 결과:

Locks: stepped canal basins open in sequence from the selected lock; the readout names its stage.
Marble run: hovering slows rolling marbles so the selected ramp can be inspected.
Cabinet: nearby server blades slide outward as the pointer selects an update position.

"hairline-create" 사용 중입니다. Build the supplied Riffle example and describe its interaction.

예상 결과:

A standalone HTML page shows eight cards in a rounded tray. The selected card rises, neighboring cards lean away, and the slider controls stagger timing.

"hairline-create" 사용 중입니다. Describe the visual inspection deliverables for a completed figure.

예상 결과:

A labeled PNG sheet compares eight states, including thumbnails, slider extremes, and dark and light themes.
The inspection reports frame bounds, readouts, console messages, and settling observations.
Unverified visual checks are disclosed when no browser is available.

보안 감사

중간 위험

v1 • 2026. 10. 4. 버전별 보고서 열기

Most static matches are benign JavaScript syntax, documentation, CSS, or intended local file operations. Automatic npm installation exposes the host to mutable dependencies and enabled lifecycle scripts, while browser inspection lacks network isolation. No evidence found of credential theft, malicious supplied figures, or audit-directed prompt injection.

스캔된 파일

1,859

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

중간

validate.mjs:89-93 look.mjs:111-112 look.mjs:133-138

Browser Inspection Lacks Network Isolation

The validator rejects literal API names, but does not establish a security boundary for JavaScript. Accepted figures execute without network blocking, so computed API access can reach external or local network services.

Source inspection shows regex-based API rejection and page navigation without request blocking. No evidence found of actual exfiltration or malicious supplied figures.

기능 검토 항목 (2)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

높음

look.mjs:26

Node.js child_process module

import { spawnSync } from "node:child_process";

The imported spawnSync is used at line 78 for automatic npm installation. Mutable dependency resolution and enabled lifecycle scripts expose the host to supply-chain execution.

높음

look.mjs:78

Synchronous spawn

const run = spawnSync(win ? "npm.cmd" : "npm", ["install", "playwright-core@1", "--prefix", dir, "--

spawnSync automatically installs playwright-core@1 without disabling npm lifecycle scripts. A compromised dependency or existing cache manifest can execute host commands during installation.

위험 요인

⚙️ 외부 명령어 (50)

⚡ 스크립트 포함 (9)

build.mjs:25 look.mjs:79 look.mjs:179 validate.mjs:138 validate.mjs:142 validate.mjs:166 validate.mjs:167 validate.mjs:180 validate.mjs:185

📁 파일 시스템 접근 (28)

🔑 환경 변수 (1)

look.mjs:56

🌐 네트워크 접근 (1)

validate.mjs:89

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/lucasmarkes-hairline-create/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/lucasmarkes-hairline-create/security.svg)](https://skillstore.io/skills/lucasmarkes-hairline-create?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/lucasmarkes-hairline-create?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/lucasmarkes-hairline-create/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/lucasmarkes-hairline-create.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

lucasmarkes. (2026). hairline-create security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/lucasmarkes-hairline-create/audits/1

BibTeX 인용

@techreport{lucasmarkes-lucasmarkes-hairline-create-2026,
  author = {lucasmarkes},
  title = {hairline-create security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/lucasmarkes-hairline-create/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "hairline-create security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "lucasmarkes"
date-released: "2026-10-04"
url: "https://skillstore.io/skills/lucasmarkes-hairline-create/audits/1"
identifiers:
  - type: other
    value: "skillstore:lucasmarkes-hairline-create:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Prototype a Pointer Interaction

Explore how a tray, stack, or field responds to pointer movement before adapting the interaction to a product.

Build a Shareable Illustration

Create a standalone HTML line figure with theme switching, an intensity slider, and no runtime external assets.

Explain a Process Through an Object

Translate a process into a recognizable physical metaphor with one gesture and a short readout.

이 프롬프트를 사용해 보세요

Choose a Concept

Suggest three Hairline concepts for [idea]. Describe each object, pointer response, and short readout. Wait for my choice before building.

Create a Figure

Create a Hairline figure of [object] that [pointer action]. Use the supplied engine and page, then validate the HTML. Ask before installing dependencies.

Inspect Every State

Inspect [figure file] using [answer point] and [edge points]. Capture the eight views, report failures, and inspect the sheet. Ask before installing dependencies.

Refine Without Changing the Engine

Refine [figure file] to [requested change]. Edit only the figure, preserve stable hit areas, rerun validation, and disclose unverified checks. Ask before installing dependencies.

모범 사례

Choose one recognizable object, one pointer gesture, and a composed rest pose before writing the figure.
Keep the engine and page unchanged, and review dependency installation before running browser inspection.
Validate after every edit, inspect all eight views, and disclose any checks that could not be performed.

피하기

Modify the engine or page template to work around a figure problem.
Add labels, icons, custom colors, or independent animation timers inside the drawing.
Treat a passing text validator as proof of visual quality or security isolation.