Habilidades software-copyright-materials
📦
software-copyright-materials
Revisão do conteúdo r1 Risco alto ⚙️ Comandos externos🌐 Acesso à rede📁 Acesso ao sistema de arquivos
Gerar Materiais de Direitos de Autor de Software
Os pedidos de direitos de autor de software exigem materiais consistentes de código, manual e candidatura. Esta skill orienta Claude Code, Claude ou Codex através de rascunhos chineses baseados em evidências e resultados finais em Word ou TXT.
Suporta: Claude Codex Code(CC)
Pare e solicite confirmação antes de instalar.
Revise o plano e obtenha o consentimento explícito do usuário antes de alterar arquivos.
Instalar com meu Agente
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Solicitação do agente
Review the Skillstore skill "software-copyright-materials" from https://skillstore.io/skills/fokkyp-software-copyright-materials.md and its manifest at https://skillstore.io/api/skills/fokkyp-software-copyright-materials/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Recursos legíveis por agentes
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Testar
Usando "software-copyright-materials". Gerar materiais de direitos de autor de software para um sistema de gestão React.
Resultado esperado:
O fluxo de trabalho cria verificações de ambiente, análise do projeto, rascunhos de compreensão do negócio, informações da candidatura, materiais de extração de código e um manual de operação em chinês para revisão.
Usando "software-copyright-materials". Quero ignorar as capturas de ecrã por agora.
Resultado esperado:
A skill regista a escolha de capturas de ecrã, mantém placeholders visíveis no manual e continua com materiais finais baseados em texto após confirmação.
Usando "software-copyright-materials". Use apenas ficheiros frontend selecionados para o documento de código.
Resultado esperado:
A skill prepara uma lista de candidatos, pede confirmação e depois extrai apenas os ficheiros ou intervalos de linhas aprovados para materiais de código rastreáveis.
Auditoria de segurança
Risco altov5 • 21/07/2026 Abrir o relatório versionado
Most static matches are false positives from Chinese prose, OOXML samples, documentation, and normal document-generation operations. The optional DOCX setup workflow is a real high-risk installer: it uses sudo, downloads and executes a remote installer, and changes user shell configuration. Do not run that setup workflow automatically or without user review. Static review was capped at 400/1023 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
92
Arquivos analisados
42,684
Linhas analisadas
64
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (1)
Alto
Remote installer execution and shell configuration changes
The optional DOCX setup script downloads a remote .NET installer, executes it, and appends a PATH export to the user shell profile. This creates supply-chain and persistent local-configuration risk if run without review.
The cited lines explicitly download an installer, execute it from /tmp, and append to .bashrc. These behaviors are directly visible and have material host impact.
Itens de revisão de capacidade (64)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Alto
PowerShell invocation
# docx-toolkit Environment Setup & Initialization Script (Windows PowerShell)
This is an executable environment setup script that installs dependencies and changes local configuration. It should not be run automatically and requires user review.
Alto
PowerShell invocation
Fail "After installing, restart PowerShell and re-run this script."
This is an executable environment setup script that installs dependencies and changes local configuration. It should not be run automatically and requires user review.
Alto
PowerShell invocation
Fail "dotnet installation failed. Restart PowerShell and retry, or install manually."
This is an executable environment setup script that installs dependencies and changes local configuration. It should not be run automatically and requires user review.
Alto
sudo privilege escalation
echo " # Option 2 (Ubuntu/Debian): sudo apt-get install -y dotnet-sdk-8.0"
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
linux|wsl) echo " Install: sudo apt-get install pandoc # or dnf/pacman" ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
linux|wsl) echo " Install: sudo apt-get install libreoffice-core" ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
sudo apt-get update -qq
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
sudo apt-get install -y -qq wget apt-transport-https
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
sudo dnf install -y dotnet-sdk-8.0
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
sudo pacman -S --noconfirm dotnet-sdk
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
sudo zypper install -y dotnet-sdk-8.0
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
apt) sudo apt-get install -y -qq pandoc ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
dnf) sudo dnf install -y pandoc ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
pacman) sudo pacman -S --noconfirm pandoc ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
zypper) sudo zypper install -y pandoc ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
apt) sudo apt-get install -y -qq libreoffice-core ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
dnf) sudo dnf install -y libreoffice-core ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
pacman) sudo pacman -S --noconfirm libreoffice-still ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
zypper) sudo zypper install -y libreoffice ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
apt) sudo apt-get install -y -qq zip unzip ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
dnf) sudo dnf install -y zip unzip ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
pacman) sudo pacman -S --noconfirm zip unzip ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
zypper) sudo zypper install -y zip unzip ;;
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
info "To fix permanently: sudo locale-gen en_US.UTF-8 && sudo update-locale LANG=en_US.UTF-8"
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
info " sudo apt-get install -y fonts-liberation fonts-noto-cjk"
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
info " # For MS core fonts: sudo apt-get install -y ttf-mscorefonts-installer"
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
info " sudo dnf install -y liberation-fonts google-noto-sans-cjk-fonts"
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Alto
sudo privilege escalation
info " sudo pacman -S ttf-liberation noto-fonts-cjk"
The setup script executes package-manager commands through sudo. Running it grants elevated installation authority and can alter the host, so it requires explicit human review and consent.
Médio
Hidden file access
/tmp/dotnet-install.sh --channel 8.0 --install-dir "$HOME/.dotnet"
The setup script writes under the user home directory and may modify shell configuration. This is a material local configuration change requiring user consent.
Médio
Hidden file access
export PATH="$HOME/.dotnet:$PATH"
The setup script writes under the user home directory and may modify shell configuration. This is a material local configuration change requiring user consent.
Médio
Hidden file access
echo 'export PATH="$HOME/.dotnet:$PATH"' >> "$HOME/.bashrc"
The setup script writes under the user home directory and may modify shell configuration. This is a material local configuration change requiring user consent.
Médio
Hidden file access
/tmp/dotnet-install.sh --channel 8.0 --install-dir "$HOME/.dotnet"
The setup script writes under the user home directory and may modify shell configuration. This is a material local configuration change requiring user consent.
Médio
Hidden file access
export PATH="$HOME/.dotnet:$PATH"
The setup script writes under the user home directory and may modify shell configuration. This is a material local configuration change requiring user consent.
Médio
Hidden file access
echo 'export PATH="$HOME/.dotnet:$PATH"' >> "$HOME/.bashrc"
The setup script writes under the user home directory and may modify shell configuration. This is a material local configuration change requiring user consent.
Médio
Hidden file access
local nuget_config="$HOME/.nuget/NuGet/NuGet.Config"
The setup script writes under the user home directory and may modify shell configuration. This is a material local configuration change requiring user consent.
Médio
Shell command substitution
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
The setup script combines command substitution with dependency installation and host configuration. Although conventional shell syntax, it is unsafe for unattended execution.
Médio
Shell command substitution
PROJECT_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
The setup script combines command substitution with dependency installation and host configuration. Although conventional shell syntax, it is unsafe for unattended execution.
Médio
Shell command substitution
ARCH="$(uname -m)"
The setup script combines command substitution with dependency installation and host configuration. Although conventional shell syntax, it is unsafe for unattended execution.
Médio
Shell command substitution
case "$(uname -s)" in
The setup script combines command substitution with dependency installation and host configuration. Although conventional shell syntax, it is unsafe for unattended execution.
Médio
Shell command substitution
ver=$(dotnet --version 2>/dev/null || echo "0")
The setup script combines command substitution with dependency installation and host configuration. Although conventional shell syntax, it is unsafe for unattended execution.
Médio
Shell command substitution
log "dotnet $(dotnet --version) installed"
The setup script combines command substitution with dependency installation and host configuration. Although conventional shell syntax, it is unsafe for unattended execution.
Médio
Temp directory access
wget -q "https://dot.net/v1/dotnet-install.sh" -O /tmp/dotnet-install.sh
The setup workflow writes and executes an installer from a temporary directory. This dependency-install path needs review because it affects the local environment.
Médio
Temp directory access
chmod +x /tmp/dotnet-install.sh
The setup workflow writes and executes an installer from a temporary directory. This dependency-install path needs review because it affects the local environment.
Médio
Temp directory access
/tmp/dotnet-install.sh --channel 8.0 --install-dir "$HOME/.dotnet"
The setup workflow writes and executes an installer from a temporary directory. This dependency-install path needs review because it affects the local environment.
Médio
Temp directory access
wget -q "https://dot.net/v1/dotnet-install.sh" -O /tmp/dotnet-install.sh || \
The setup workflow writes and executes an installer from a temporary directory. This dependency-install path needs review because it affects the local environment.
Médio
Temp directory access
curl -sSL "https://dot.net/v1/dotnet-install.sh" -o /tmp/dotnet-install.sh
The setup workflow writes and executes an installer from a temporary directory. This dependency-install path needs review because it affects the local environment.
Médio
Temp directory access
chmod +x /tmp/dotnet-install.sh
The setup workflow writes and executes an installer from a temporary directory. This dependency-install path needs review because it affects the local environment.
Médio
Temp directory access
/tmp/dotnet-install.sh --channel 8.0 --install-dir "$HOME/.dotnet"
The setup workflow writes and executes an installer from a temporary directory. This dependency-install path needs review because it affects the local environment.
Médio
Temp directory access
local test_output="/tmp/docx-toolkit-setup-test-$$.docx"
The setup workflow writes and executes an installer from a temporary directory. This dependency-install path needs review because it affects the local environment.
Baixo
Standard device file access
if command -v brew &>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if grep -qi microsoft /proc/version 2>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if command -v dotnet &>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
ver=$(dotnet --version 2>/dev/null || echo "0")
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if [ "$major" -ge 8 ] 2>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if ! dpkg -l dotnet-sdk-8.0 &>/dev/null 2>&1; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if command -v dotnet &>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if command -v pandoc &>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if command -v pandoc &>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if command -v soffice &>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if command -v soffice &>/dev/null; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
command -v zip &>/dev/null && log "zip already installed" || need_zip=true
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
command -v unzip &>/dev/null && log "unzip already installed" || need_unzip=true
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
brew) brew install zip unzip 2>/dev/null || true ;;
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Baixo
Standard device file access
if dotnet nuget list source 2>/dev/null | grep -q "nuget.org"; then
The setup script performs host-environment detection while preparing dependency installation. It is not data exfiltration, but it is part of a privileged installer workflow and needs explicit review.
Fatores de risco
⚙️ Comandos externos (50)
scripts/analyze_project.py:225 scripts/build_docx_from_md.py:562 scripts/build_docx_from_md.py:586 scripts/build_docx_from_md.py:94 scripts/build_docx_from_md.py:98 scripts/build_docx_from_md.py:102 scripts/build_docx_from_md.py:114 scripts/build_docx_from_md.py:118 scripts/build_docx_from_md.py:138-494 scripts/build_docx_from_md.py:494-551 scripts/build_docx_from_md.py:551 scripts/build_docx_from_md.py:600 scripts/build_docx_from_md.py:608 scripts/check_environment.py:20 scripts/check_environment.py:32 scripts/check_environment.py:93 scripts/check_environment.py:94 scripts/check_environment.py:114 scripts/check_environment.py:116-119 scripts/check_environment.py:119-123 scripts/check_environment.py:123-125 scripts/confirm_stage.py:76 scripts/extract_code_material.py:122 scripts/extract_code_material.py:206-208 scripts/extract_code_material.py:208-235 scripts/generate_application_info.py:385-388 scripts/generate_application_info.py:388-404 scripts/generate_business_context.py:25 scripts/generate_business_context.py:27-124 scripts/generate_business_context.py:124-262 scripts/generate_business_context.py:262-300 scripts/generate_business_context.py:300-306 scripts/generate_business_context.py:306-309 scripts/generate_manual_draft.py:598-601 scripts/generate_manual_draft.py:601-694 scripts/propose_code_selection.py:89 scripts/propose_code_selection.py:92-95 scripts/propose_code_selection.py:95-100 scripts/propose_code_selection.py:100 scripts/propose_code_selection.py:101 scripts/propose_code_selection.py:102-112 scripts/propose_code_selection.py:112-117 SKILL.md:18 SKILL.md:21 SKILL.md:23 SKILL.md:24 SKILL.md:26 SKILL.md:34 SKILL.md:37 SKILL.md:41
🌐 Acesso à rede (50)
scripts/build_docx_from_md.py:333 scripts/build_docx_from_md.py:345 scripts/build_docx_from_md.py:353 scripts/build_docx_from_md.py:354 scripts/build_docx_from_md.py:357 scripts/build_docx_from_md.py:362 scripts/build_docx_from_md.py:364 scripts/build_docx_from_md.py:371 vendor/docx-toolkit/assets/styles/academic_styles.xml:2 vendor/docx-toolkit/assets/styles/academic_styles.xml:3 vendor/docx-toolkit/assets/styles/academic_styles.xml:4 vendor/docx-toolkit/assets/styles/corporate_styles.xml:2 vendor/docx-toolkit/assets/styles/corporate_styles.xml:3 vendor/docx-toolkit/assets/styles/corporate_styles.xml:4 vendor/docx-toolkit/assets/styles/default_styles.xml:2 vendor/docx-toolkit/assets/styles/default_styles.xml:3 vendor/docx-toolkit/assets/styles/default_styles.xml:4 vendor/docx-toolkit/assets/xsd/aesthetic-rules.xsd:31 vendor/docx-toolkit/assets/xsd/aesthetic-rules.xsd:32 vendor/docx-toolkit/assets/xsd/business-rules.xsd:7 vendor/docx-toolkit/assets/xsd/business-rules.xsd:8 vendor/docx-toolkit/assets/xsd/common-types.xsd:5 vendor/docx-toolkit/assets/xsd/common-types.xsd:6 vendor/docx-toolkit/assets/xsd/wml-subset.xsd:6 vendor/docx-toolkit/assets/xsd/wml-subset.xsd:7 vendor/docx-toolkit/assets/xsd/wml-subset.xsd:8 vendor/docx-toolkit/assets/xsd/wml-subset.xsd:9 vendor/docx-toolkit/assets/xsd/wml-subset.xsd:12 vendor/docx-toolkit/assets/xsd/wml-subset.xsd:13 vendor/docx-toolkit/references/comments_guide.md:17 vendor/docx-toolkit/references/comments_guide.md:18 vendor/docx-toolkit/references/comments_guide.md:42 vendor/docx-toolkit/references/comments_guide.md:56 vendor/docx-toolkit/references/comments_guide.md:70 vendor/docx-toolkit/references/comments_guide.md:123 vendor/docx-toolkit/references/comments_guide.md:125 vendor/docx-toolkit/references/comments_guide.md:127 vendor/docx-toolkit/references/comments_guide.md:129 vendor/docx-toolkit/references/openxml_encyclopedia_part1.md:172 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:1700 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:2588 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:2599 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:2607 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:2615 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:2623 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:2633 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:2635 vendor/docx-toolkit/references/openxml_encyclopedia_part2.md:2777 vendor/docx-toolkit/references/openxml_encyclopedia_part3.md:719 vendor/docx-toolkit/references/openxml_encyclopedia_part3.md:1811
📁 Acesso ao sistema de arquivos (50)
scripts/build_docx_from_md.py:383 scripts/build_docx_from_md.py:11 scripts/build_docx_from_md.py:557 scripts/build_docx_from_md.py:663 scripts/build_docx_from_md.py:12 scripts/build_docx_from_md.py:381 scripts/build_docx_from_md.py:416 scripts/capture_screenshots.py:32 vendor/docx-toolkit/references/openxml_encyclopedia_part3.md:1095 vendor/docx-toolkit/references/troubleshooting.md:491 vendor/docx-toolkit/scripts/doc_to_docx.sh:22 vendor/docx-toolkit/scripts/doc_to_docx.sh:32 vendor/docx-toolkit/scripts/docx_preview.sh:25 vendor/docx-toolkit/scripts/docx_preview.sh:26 vendor/docx-toolkit/scripts/docx_preview.sh:36 vendor/docx-toolkit/scripts/dotnet/DocxToolkit.Cli/DocxToolkit.Cli.csproj:4 vendor/docx-toolkit/scripts/dotnet/DocxToolkit.Core/Samples/DocumentCreationSamples.cs:208 vendor/docx-toolkit/scripts/dotnet/DocxToolkit.Core/Samples/DocumentCreationSamples.cs:209 vendor/docx-toolkit/scripts/dotnet/DocxToolkit.Core/Samples/DocumentCreationSamples.cs:210 vendor/docx-toolkit/scripts/dotnet/DocxToolkit.Core/Samples/TableSamples.cs:39 vendor/docx-toolkit/scripts/dotnet/DocxToolkit.Core/Samples/TableSamples.cs:40 vendor/docx-toolkit/scripts/env_check.sh:27 vendor/docx-toolkit/scripts/env_check.sh:27 vendor/docx-toolkit/scripts/env_check.sh:33 vendor/docx-toolkit/scripts/env_check.sh:53 vendor/docx-toolkit/scripts/env_check.sh:55 vendor/docx-toolkit/scripts/env_check.sh:70 vendor/docx-toolkit/scripts/env_check.sh:72 vendor/docx-toolkit/scripts/env_check.sh:95 vendor/docx-toolkit/scripts/env_check.sh:96 vendor/docx-toolkit/scripts/env_check.sh:109 vendor/docx-toolkit/scripts/env_check.sh:110 vendor/docx-toolkit/scripts/env_check.sh:139 vendor/docx-toolkit/scripts/env_check.sh:144 vendor/docx-toolkit/scripts/env_check.sh:41 vendor/docx-toolkit/scripts/env_check.sh:42 vendor/docx-toolkit/scripts/setup.sh:14 vendor/docx-toolkit/scripts/setup.sh:112 vendor/docx-toolkit/scripts/setup.sh:113 vendor/docx-toolkit/scripts/setup.sh:114 vendor/docx-toolkit/scripts/setup.sh:140 vendor/docx-toolkit/scripts/setup.sh:141 vendor/docx-toolkit/scripts/setup.sh:142 vendor/docx-toolkit/scripts/setup.sh:319 vendor/docx-toolkit/scripts/setup.sh:70 vendor/docx-toolkit/scripts/setup.sh:38 vendor/docx-toolkit/scripts/setup.sh:70 vendor/docx-toolkit/scripts/setup.sh:87 vendor/docx-toolkit/scripts/setup.sh:89 vendor/docx-toolkit/scripts/setup.sh:91
Auditado por: claude Ver histórico de auditoria →
Compartilhar e citar este relatório
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
Copiar link do relatório
https://skillstore.io/skills/fokkyp-software-copyright-materials/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/fokkyp-software-copyright-materials?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/fokkyp-software-copyright-materials?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/fokkyp-software-copyright-materials/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Cartão incorporável
<iframe src="https://skillstore.io/embed/skills/fokkyp-software-copyright-materials.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citações acadêmicas (APA · BibTeX · CFF)
Citação APA
Fokkyp. (2026). software-copyright-materials security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/fokkyp-software-copyright-materials/audits/5Citação BibTeX
@techreport{fokkyp-fokkyp-software-copyright-materials-2026,
author = {Fokkyp},
title = {software-copyright-materials security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/fokkyp-software-copyright-materials/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "software-copyright-materials security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "Fokkyp"
date-released: "2026-07-21"
url: "https://skillstore.io/skills/fokkyp-software-copyright-materials/audits/5"
identifiers:
- type: other
value: "skillstore:fokkyp-software-copyright-materials:audit:5"
description: "Skillstore immutable audit report identifier"
Pontuação do Skillstore
Por que esta pontuação Confiança das evidências: Médio 68
Arquitetura
85
Manutenibilidade
87
Conteúdo
68
Comunidade
83
Conformidade com a especificação
O que você pode criar
Preparar um primeiro pacote de pedido
Gere texto de candidatura em rascunho, materiais de código e um manual de operação a partir de um projeto real antes da revisão formal.
Normalizar entregáveis para clientes
Crie materiais chineses consistentes de direitos de autor de software para vários projetos de clientes com pontos de confirmação.
Rever evidências do projeto antes da submissão
Rastreie ficheiros de código selecionados, nomes de software, dados de versão e conteúdo do manual antes de gerar ficheiros Word finais.
Teste estes prompts
Iniciar um fluxo de pedido básico
Use a skill software-copyright-materials para analisar este projeto e começar a gerar materiais chineses de candidatura de direitos de autor de software. Pare em cada etapa de confirmação obrigatória.
Gerar rascunhos para revisão
Analise o projeto, construa as evidências de compreensão do negócio e gere rascunhos em Markdown para informações da candidatura, materiais de código e o manual de operação. Não crie ficheiros Word finais até eu confirmar os rascunhos.
Controlar a seleção de materiais de código
Prepare a lista de ficheiros de código candidatos para materiais de direitos de autor de software. Recomende ficheiros e intervalos de linhas que melhor demonstrem as funções reais do produto e depois aguarde a minha confirmação antes da extração.
Concluir materiais finais com restrições
Depois de confirmar o contexto de negócio, os campos da candidatura, a seleção de código, o método de capturas de ecrã e os rascunhos em Markdown, gere os materiais finais em Word e TXT. Mantenha o nome e a versão do software consistentes com as informações de candidatura confirmadas.
Boas práticas
- Reveja todos os rascunhos em Markdown antes de permitir a geração final em Word ou TXT.
- Confirme uma vez o nome completo e a versão do software e depois use os mesmos valores em todos os materiais finais.
- Forneça contexto de negócio claro e capturas de ecrã quando o código-fonte não explicar o fluxo de trabalho do produto.
Evitar
- Não submeta materiais gerados sem revisão jurídica, de negócio e técnica.
- Não permita que o fluxo de trabalho invente funções do produto que não sejam suportadas por evidências do projeto.
- Não execute scripts de configuração incluídos sem compreender a instalação de pacotes e as alterações à shell.
Perguntas frequentes
Esta skill fornece aconselhamento jurídico?
Não. Prepara materiais em rascunho e saídas de documentos, mas os utilizadores devem revê-los com profissionais qualificados antes da submissão.
Pode criar materiais de código a partir de qualquer projeto?
Funciona melhor quando o código-fonte do projeto e a documentação principal estão disponíveis no workspace atual.
Exige capturas de ecrã?
Não. Os utilizadores podem escolher capturas de ecrã automáticas, capturas fornecidas pelo utilizador ou placeholders visíveis quando as capturas de ecrã são ignoradas.
Porque são obrigatórias as etapas de confirmação?
Os pontos de confirmação impedem que nomes de software, versões, seleções de código e descrições de negócio incorretos cheguem aos documentos finais.
Que ficheiros finais pode produzir?
Pode produzir uma saída TXT de candidatura, ficheiros DOCX de código, um manual de operação DOCX e um relatório de geração.
Claude Code pode usar esta skill com segurança?
Claude Code pode usar o fluxo de trabalho orientado, mas os utilizadores devem rever os scripts de configuração locais antes de executar comandos de instalação de dependências.
Detalhes do desenvolvedor
Autor
FokkypLicença
MIT
Revisão da Skillstore
r1
Aviso de versão
O autor não declarou uma versão.
Repositório
https://github.com/Fokkyp/SoftwareCopyright-Skill/tree/main/software-copyright-materialsReferência
1ffa7643651792ccb4bd3b15d924d2c97edff755
Atualidade da manutenção
26/07/2026
Uso
6 downloads · 63 visualizações
Estrutura de arquivos
📁 agents/
📄 business_understanding_rules.md
📁 scripts/
📄 generate_application_info.py
📄 generate_business_context.py
📄 SKILL.md
📁 vendor/
📁 assets/
📁 styles/
📁 xsd/
📄 LICENSE
📄 cjk_university_template_guide.md
📄 openxml_encyclopedia_part1.md
📄 openxml_encyclopedia_part2.md
📄 openxml_encyclopedia_part3.md
📄 scenario_c_apply_template.md
📁 scripts/
📁 dotnet/
📁 OpenXml/
📁 Samples/
📄 AestheticRecipeSamples_Batch1.cs
📄 AestheticRecipeSamples_Batch2.cs
📄 AestheticRecipeSamples_Batch3.cs
📄 AestheticRecipeSamples_Batch4.cs
📄 CharacterFormattingSamples.cs
📄 FootnoteAndCommentSamples.cs
📄 ParagraphFormattingSamples.cs
📄 setup.sh
📄 SKILL.md