📦

bookforge

Name: bookforge
Author: gongnyang

Revisão do conteúdo r1 Risco alto 📁 Acesso ao sistema de arquivos🌐 Acesso à rede⚙️ Comandos externos🔑 Variáveis de ambiente⚡ Contém scripts

Create Korean Ebook PDFs from Topics or Manuscripts

Preparing a Korean PDF book requires consistent content structure, typography, and pagination. Bookforge combines six design styles with guided writing, local rendering, automated quality checks, and visual review.

Suporta: Claude Codex Code(CC)

⚠️ 38 Ruim

Pare e solicite confirmação antes de instalar.

Revise o plano e obtenha o consentimento explícito do usuário antes de alterar arquivos.

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "bookforge" from https://skillstore.io/skills/gongnyang-bookforge.md and its manifest at https://skillstore.io/api/skills/gongnyang-bookforge/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/gongnyang-bookforge.md manifest assinado GET /api/skills/gongnyang-bookforge/manifest lockfile assinado GET /api/skills/gongnyang-bookforge/lockfile

Testar

Usando "bookforge". A topic brief for a short Korean guide to spreadsheet workflows.

Resultado esperado:

Illustrative deliverables: sourced research notes, a chapter outline, Markdown chapters, a practical-style PDF, a QC report, and page previews.

Usando "bookforge". A trusted Korean essay manuscript in DOCX format with chapter headings.

Resultado esperado:

Illustrative deliverables: normalized chapter files, extracted summaries, an essay-style PDF, and a record of formatting changes.

Usando "bookforge". Trusted research notes, chart data, and a brand color for an industry report.

Resultado esperado:

Illustrative deliverables: a business-style PDF with sourced figures, numbered contents, bookmarks, and diagrams checked for readable labels and contrast.

Auditoria de segurança

Risco alto

v1 • 06/10/2026 Abrir o relatório versionado

Most supplied alerts are benign documentation, integrity hashes, regex matches, or expected local build operations. Unconfined paths and active-content rendering expose untrusted projects; no evidence found of deliberate exfiltration or audit-directed prompt injection in reviewed material. The oversized executable bundle and 791 omitted matches remain review gaps, so these verdicts do not establish complete publication safety. Static review was capped at 400/1191 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Arquivos analisados

22,454

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (3)

Alto

scripts/build_html.py:31-32 scripts/build_html.py:808-822 scripts/print_pdf.mjs:18-22 scripts/render_diagrams.mjs:1355-1390 scripts/fo2text.mjs:24-38 scripts/build.py:25-27

Active Document Content Executes Before Quality Checks

Raw Markdown HTML and unescaped callouts enter the Chromium PDF renderer. Authored SVGs enter page.setContent after only narrow external-reference checks. Hostile markup can run browser scripts or make outbound and internal-network requests before QC rejects the project.

The inspected paths embed input markup in browsers without disabling JavaScript or denying network requests. This confirms exposure, not malicious exploitation or host-level execution.

Médio

scripts/build.py:109-119 scripts/build_html.py:1009-1010 scripts/md2typ.py:302-303

Unconfined Outline Paths Can Disclose Local Text

Both build engines join chapter file values without rejecting absolute paths or checking resolved containment. A hostile outline can place readable outside-project text into the book. Sharing that output can unintentionally disclose local information.

The chapter file value reaches Python read_text without a containment check in both engines. Typst's compile root cannot constrain those earlier reads.

Baixo

vendor/antv-ssr.bundle.mjs:1

Unscanned file (too_large) — manual review required

[unscanned: too_large]

The 2.47 MB executable bundle is imported during diagram rendering but exceeded the scanner limit. Partial inspection cannot establish complete provenance or safety.

Itens de revisão de capacidade (6)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Alto

scripts/build_html.py:854

Path traversal sequence

if book_dir and src.endswith(".svg") and src.startswith("../assets/"):

A chapter-controlled SVG suffix is joined under assets without resolving and enforcing containment. Parent segments or symlinks can read and inline SVGs outside the project.

Alto

scripts/build_html.py:855

Path traversal sequence

svg_path = book_dir / "assets" / src[len("../assets/"):]

A chapter-controlled SVG suffix is joined under assets without resolving and enforcing containment. Parent segments or symlinks can read and inline SVGs outside the project.

Alto

scripts/qc_gate.py:345

Path traversal sequence

name = ref[len("../assets/"):]

The SVG reference suffix reaches read_text after an unconstrained assets path join. A hostile reference can make QC read an outside SVG.

Alto

scripts/qc_gate.py:388

Path traversal sequence

stem = ref[len("../assets/"):-len(".svg")]

An unchecked reference stem forms the labels.json path before a local file read. Parent segments or symlinks can escape assets and read unrelated JSON.

Alto

scripts/qc_gate.py:432

Path traversal sequence

stem = ref[len("../assets/"):-len(".svg")]

The unchecked reference stem forms SVG, label, sidecar, and metric paths. QC reads those files without checking resolved project containment.

Médio

scripts/render_diagrams.mjs:175

Synchronous file operations

const tokens = JSON.parse(readFileSync(tokensPath, "utf8"));

The style token path is derived from the style argument without enforcing the styles directory. A hostile book style can select a tokens.json outside that directory.

Fatores de risco

📁 Acesso ao sistema de arquivos (50)

assets/fonts/LICENSES.md:3 modes/topic.md:38 modes/topic.md:45 README.en.md:92 README.en.md:93 README.en.md:94 README.en.md:92 README.en.md:93 README.en.md:94 README.en.md:92 README.en.md:93 README.en.md:94 README.md:92 README.md:93 README.md:94 README.md:92 README.md:93 README.md:94 README.md:92 README.md:93 README.md:94 references/diagrams.md:18 references/diagrams.md:42 references/diagrams.md:42 references/extending.md:104 references/extending.md:106 references/extending.md:107 references/extending.md:111 references/extending.md:112 scripts/build_html.py:854 scripts/build_html.py:855 scripts/build_html.py:1489 scripts/build.py:99 scripts/build.py:94 scripts/build.py:95 scripts/fetch_fonts.py:14 scripts/fetch_fonts.py:33 scripts/fo2text.mjs:8 scripts/fo2text.mjs:250 scripts/fo2text.mjs:251 scripts/fo2text.mjs:255 scripts/fo2text.mjs:235 scripts/fo2text.mjs:174 scripts/fo2text.mjs:210 scripts/g16_tokens.py:1601 scripts/g16_tokens.py:1078 scripts/g16_tokens.py:1086 scripts/g16_tokens.py:1226 scripts/g16_tokens.py:1234 scripts/g16_tokens.py:1236

🌐 Acesso à rede (50)

⚙️ Comandos externos (50)

🔑 Variáveis de ambiente (6)

scripts/build_html.py:1232 scripts/build.py:73 tests/mutations/run_mutations.py:795 tests/test_wcag_parity.py:46 tests/test_wcag_parity.py:46 tests/test_wcag_parity.py:70

⚡ Contém scripts (13)

scripts/build.py:131 scripts/fo2text.mjs:235 scripts/fo2text.mjs:237 scripts/fo2text.mjs:238 scripts/render_diagrams.mjs:485 scripts/render_diagrams.mjs:488 scripts/render_diagrams.mjs:489 scripts/render_diagrams.mjs:728 scripts/render_diagrams.mjs:773 SKILL.md:20 templates/base.typ:238 tests/mutations/run_mutations.py:171-173 tests/mutations/run_mutations.py:174-176

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/gongnyang-bookforge/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/gongnyang-bookforge/security.svg)](https://skillstore.io/skills/gongnyang-bookforge?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/gongnyang-bookforge?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gongnyang-bookforge/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/gongnyang-bookforge.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

gongnyang. (2026). bookforge security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/gongnyang-bookforge/audits/1

Citação BibTeX

@techreport{gongnyang-gongnyang-bookforge-2026,
  author = {gongnyang},
  title = {bookforge security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/gongnyang-bookforge/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "bookforge security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "gongnyang"
date-released: "2026-10-06"
url: "https://skillstore.io/skills/gongnyang-bookforge/audits/1"
identifiers:
  - type: other
    value: "skillstore:gongnyang-bookforge:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Publish a Practical Korean Guide

Develop a sourced topic into chapters, tips, tables, and a consistently formatted PDF using the practical style.

Typeset an Existing Manuscript

Preserve manuscript meaning while organizing chapters, extracting summaries, and applying essay or academic layouts.

Prepare a Branded Research Report

Format trusted research, figures, and citations into an insight or business PDF with a brand color and checked pagination.

Teste estes prompts

Beginner: Start from a Topic

Create a short Korean ebook about [topic] for [audience] using the practical style. Verify factual sources, build the book, run QC, and inspect representative pages.

Intermediate: Format a Manuscript

Typeset my trusted [Markdown, text, or DOCX] manuscript as a Korean essay ebook. Preserve its meaning, report normalization changes, and complete QC and visual inspection.

Advanced: Produce a Branded Report

Create a Korean business report from my trusted research files for [audience], using brand color [hex]. Preserve citations and add supported vector charts. Report build or QC failures before delivery.

Expert: Build a Diagram-Rich Book

Create a standard-length Korean technical ebook from my trusted outline and chapters. Choose diagram types by purpose and retain captions and sources. Use AntV sidecars or authored SVGs, verify labels and contrast, then run QC and inspect page previews.

Boas práticas

Keep book projects outside the skill repository and provide only trusted manuscripts, metadata, and SVG assets.
Choose a style for the audience and supply verified sources, image permissions, and substantive content for the selected length.
Run the build and QC gates, then inspect the cover, contents, chapter opener, and body pages before distributing the PDF.

Evitar

Do not process unknown projects or active HTML and SVG inputs with unrestricted browser or filesystem access.
Do not add filler chapters, excessive spacing, or forced page breaks merely to reach a page target.
Do not weaken gates to hide book defects or treat an uninspected draft as final output.

Perguntas frequentes

Can I start with only a topic?

Yes. Topic mode guides research, outline planning, and chapter writing before typesetting and quality checks.

Which manuscript formats are supported?

Markdown, text, and DOCX are supported inputs. DOCX requires python-docx; convert HWP to a supported format first.

Which design styles are available?

The six styles are practical, insight, academic, essay, business, and magazine. Their trim sizes and layout engines differ.

Does every style require Chromium?

No. Practical, academic, essay, and business use Typst. Insight, magazine, and diagram rendering require Playwright and Chromium.

Does passing QC guarantee publication readiness?

No. QC checks defined layout and consistency rules. You must still inspect pages and verify facts, rights, and publication requirements.

Can it safely render an unknown book project?

Not currently. The audit identified unconfined paths and active-content risks. Use trusted inputs and isolated rendering until those issues are addressed.

Detalhes do desenvolvedor

Autor

gongnyang

Licença

MIT

Revisão da Skillstore

Aviso de versão

O autor não declarou uma versão.

Repositório

https://github.com/gongnyang/bookforge/tree/3f1e85ee501f5984acb8cd6d92ecb7a4c3fb5374/

Referência

549325ce6f288514ab5da9bf11af95814f848048

Atualidade da manutenção

11/10/2026

Uso

0 downloads · 0 visualizações

Estrutura de arquivos

📄 .gitignore

📁 agents/

📄 openai.yaml

📄 AGENTS.md

📁 assets/

📁 fonts/

📄 Barlow-Bold.ttf

📄 Barlow-Light.ttf

📄 Barlow-Medium.ttf

📄 Barlow-Regular.ttf

📄 Barlow-SemiBold.ttf

📄 GmarketSansTTFBold.ttf

📄 GmarketSansTTFLight.ttf

📄 GmarketSansTTFMedium.ttf

📄 LICENSE-Pretendard-OFL.txt

📄 LICENSES.md

📄 NotoSerifKR-Bold.ttf

📄 NotoSerifKR-Regular.ttf

📄 Paperlogy-4Regular.ttf

📄 Paperlogy-6SemiBold.ttf

📄 Paperlogy-7Bold.ttf

📄 Paperlogy-8ExtraBold.ttf

📄 Paperlogy-9Black.ttf

📄 Pretendard-Black.ttf

📄 Pretendard-Bold.ttf

📄 Pretendard-ExtraBold.ttf

📄 Pretendard-Light.ttf

📄 Pretendard-Medium.ttf

📄 Pretendard-Regular.ttf

📄 Pretendard-SemiBold.ttf

📁 examples/

📄 academic-game-theory.pdf

📄 business-automation-redesign.pdf

📄 business-sme-ai.pdf

📄 essay-evening-sentences.pdf

📄 insight-agent-protocols.pdf

📄 insight-ondevice-ai.pdf

📄 magazine-trend-brief.pdf

📄 practical-home-server.pdf

📄 practical-prompt-patterns.pdf

📁 showcase/

📄 academic-game-theory-cover.png

📄 academic-game-theory-page11.png

📄 academic-game-theory-page16.png

📄 academic-game-theory-toc.png

📄 business-automation-redesign-cover.png

📄 business-automation-redesign-page26.png

📄 business-automation-redesign-page9.png

📄 business-automation-redesign-toc.png

📄 business-sme-ai-cover.png

📄 business-sme-ai-page23.png

📄 business-sme-ai-page9.png

📄 business-sme-ai-toc.png

📄 essay-evening-sentences-cover.png

📄 essay-evening-sentences-page13.png

📄 essay-evening-sentences-page6.png

📄 essay-evening-sentences-toc.png

📄 insight-agent-protocols-cover.png

📄 insight-agent-protocols-page12.png

📄 insight-agent-protocols-page6.png

📄 insight-agent-protocols-toc.png

📄 insight-ondevice-ai-cover.png

📄 insight-ondevice-ai-page12.png

📄 insight-ondevice-ai-toc.png

📄 magazine-trend-brief-cover.png

📄 magazine-trend-brief-page18.png

📄 magazine-trend-brief-page6.png

📄 magazine-trend-brief-toc.png

📄 practical-home-server-cover.png

📄 practical-home-server-page12.png

📄 practical-home-server-page32.png

📄 practical-home-server-toc.png

📄 practical-prompt-patterns-cover.png

📄 practical-prompt-patterns-page20.png

📄 practical-prompt-patterns-page9.png

📄 practical-prompt-patterns-toc.png

📄 LICENSE

📁 modes/

📄 manuscript.md

📄 topic.md

📄 package-lock.json

📄 package.json

📄 README.en.md

📄 README.md

📁 references/

📄 art-policy.md

📄 book-anatomy.md

📄 diagram-ledger.json

📄 diagrams.md

📄 extending.md

📄 font-licenses.md

📄 orchestration.md

📄 pagination.md

📁 scripts/

📄 build_html.py

📄 build.py

📄 contact_sheet.py

📄 convert_fonts.py

📄 fetch_fonts.py

📄 fo2text.mjs

📄 g16_tokens.py

📄 ingest_docx.py

📄 md2typ.py

📄 pagemetrics.py

📄 print_pdf.mjs

📄 qc_gate.py

📄 refit.py

📄 render_diagrams.mjs

📄 scaffold.py

📄 tocgate.py

📄 wcag.mjs

📄 SKILL.md

📁 styles/

📁 academic/

📄 STYLE.md

📄 theme.typ

📄 tokens.json

📁 business/

📄 STYLE.md

📄 theme.typ

📄 tokens.json

📁 essay/

📄 STYLE.md

📄 theme.typ

📄 tokens.json

📁 insight/

📄 decorate.py

📄 STYLE.md

📄 theme.css

📄 theme.html

📄 tokens.json

📁 magazine/

📄 decorate.py

📄 STYLE.md

📄 theme.css

📄 theme.html

📄 toc-display-numeral.css

📄 tokens.json

📁 practical/

📄 STYLE.md

📄 theme.typ

📄 tokens.json

📁 templates/

📄 base.typ

📁 tests/

📄 lint_contrast.py

📁 mutations/

📄 fixture_from_example.py

📄 run_mutations.py

📄 test_qc_gate_g3.py

📄 test_wcag_parity.py

📁 vendor/

📄 antv-entry.mjs

📄 antv-ssr.bundle.mjs

📄 build-bundle.mjs

Ver tudo

📦

prettify-pdf

Redesenhar PDFs Sem Alterar Factos Críticos

por sethupavan12

PDFs importantes podem tornar-se mais fáceis de ler, preservando ainda assim os factos exatos da fonte. Esta skill orienta Claude, Codex e Claude Code no redesenho e na verificação.

Office e relatórios Ver

📦

pdf

Processar PDFs com Ferramentas de Extração e Formulários

por ZhanlinCui

O trabalho com PDFs muitas vezes exige ferramentas separadas para texto, tabelas, páginas e formulários. Esta skill oferece ao Claude, Codex e Claude Code fluxos de trabalho guiados e scripts auxiliares para tarefas com PDF.

Office e relatórios Ver

📦

image-to-text-pdf

Converter Imagens em PDFs Pesquisáveis

por zjsxply

Imagens finalizadas muitas vezes perdem o suporte a pesquisa e cópia quando exportadas como PDFs planos. Esta skill adiciona uma camada de texto alinhada enquanto preserva o design visual.

Office e relatórios Ver

📦

pdf-analyze

Analisar e Preencher Documentos PDF

por 21pounder

Fluxos de trabalho com PDF frequentemente exigem extração, conversão, mesclagem e preenchimento de formulários em muitos documentos. Esta skill fornece receitas práticas em Python e linha de comando para processamento repetível de PDFs.

Office e relatórios Ver

📦

pdf-processing

Processar PDFs com Extração Confiável

por 0xkynz

Fluxos de trabalho com PDFs frequentemente exigem texto, tabelas, formulários e operações de página em documentos inconsistentes. Esta competência orienta Claude, Codex e Claude Code em tarefas práticas de processamento de PDF.

Dados e analytics Ver

📦

pdf-official

Processar PDFs e Preencher Formulários

por sickn33

Equipes frequentemente precisam de extração, conversão e preenchimento de formulários PDF confiáveis sem reconstruir fluxos de trabalho do zero. Esta skill fornece operações guiadas de PDF, scripts auxiliares e exemplos de referência para Claude, Codex e Claude Code.

Office e relatórios Ver

bookforge

Instalar com meu Agente

Recursos legíveis por agentes

Testar

Auditoria de segurança

Preocupações de segurança confirmadas (3)

Fatores de risco

Copiar link do relatório

Badge Markdown

Badge HTML

Cartão incorporável

Citação APA

Citação BibTeX

CITATION.cff

Pontuação do Skillstore

O que você pode criar

Publish a Practical Korean Guide

Typeset an Existing Manuscript

Prepare a Branded Research Report

Teste estes prompts

Boas práticas

Evitar

Perguntas frequentes

Detalhes do desenvolvedor

Habilidades relacionadas

prettify-pdf

pdf

image-to-text-pdf

pdf-analyze

pdf-processing

pdf-official