Навыки explainer-high-energy

📦

explainer-high-energy

Name: explainer-high-energy
Author: barty-bart

Ревизия содержимого r1 Средний риск 📁 Доступ к файловой системе⚙️ Внешние команды🌐 Доступ к сети🔑 Переменные окружения

Create High-Energy Product Promo Videos

Short product promos need clear messaging, coordinated motion, and synchronized sound. This skill guides HTML animation and MP4 rendering with beat-based scenes and synthesized audio.

Поддерживает: Claude Codex Code(CC)

📊 68 Адекватно

Maintain this Skill? Claim it 📊 68 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "explainer-high-energy" from https://skillstore.io/skills/barty-bart-explainer-high-energy.md and its manifest at https://skillstore.io/api/skills/barty-bart-explainer-high-energy/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/barty-bart-explainer-high-energy.md Подписанный manifest GET /api/skills/barty-bart-explainer-high-energy/manifest Подписанный lockfile GET /api/skills/barty-bart-explainer-high-energy/lockfile

Протестировать

Использование «explainer-high-energy». Create a 15-second landscape promo for a task app. Approved message: group tasks by project. No statistics or website provided.

Ожидаемый результат:

Opening: an accent line expands into the product name.
Message: kinetic words introduce project-based task organization.
Product moment: a task moves into a named project.
Closing: the product name returns without unsupported statistics or offers.
Review package: a scene beat sheet, interactive HTML preview, and draft MP4.

Использование «explainer-high-energy». Prepare a portrait promo for a supplied brand, using its approved tagline and music file. Provide a review stage before final export.

Ожидаемый результат:

Format: 1080 by 1920 with six connected scenes.
Timing: scene transitions follow the supplied track's measured tempo.
Review: contact sheets identify typography, framing, and transition issues before draft approval.
Final deliverables: interactive HTML, an MP4 with audio, and a silent MP4.

Аудит безопасности

Средний риск

v1 • 20.10.2026 Открыть версионный отчет

All 57 static alerts are false positives for their reported patterns, including Markdown backticks, relative documentation links, audio serialization, and expected rendering operations. Two contextual renderer risks remain: recursive deletion of a predictable temporary directory and relaxed local-file access when rendering untrusted HTML. No evidence found of prompt injection, credential harvesting, or intentional data exfiltration.

Просканировано файлов

256

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Средний

SKILL.md:169-177

Recursive Cleanup Can Delete Existing User Files

The stills workflow reuses out + '.frames' with recursive mkdir, then deletes that entire directory recursively. Existing unrelated contents can be deleted.

mkdirSync permits an existing directory, and rmSync recursively removes it without ownership checks. Data loss requires an existing directory at the derived path.

Средний

SKILL.md:140-149 SKILL.md:154-165

Untrusted Render Pages Receive Expanded Local File Access

Chromium opens the supplied HTML with --allow-file-access-from-files and no request restrictions. Untrusted page scripts could read accessible local files and transmit their contents.

The launch flag explicitly relaxes file-origin access, while pages load without request filtering. Exploitation requires untrusted HTML; no actual exfiltration payload was found.

Факторы риска

📁 Доступ к файловой системе (6)

README.md:3 README.md:9 SKILL.md:136 SKILL.md:173 SKILL.md:203 SKILL.md:221

⚙️ Внешние команды (40)

🌐 Доступ к сети (1)

SKILL.md:144

🔑 Переменные окружения (2)

SKILL.md:144 SKILL.md:144

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/barty-bart-explainer-high-energy/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/barty-bart-explainer-high-energy/security.svg)](https://skillstore.io/skills/barty-bart-explainer-high-energy?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/barty-bart-explainer-high-energy?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-explainer-high-energy/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/barty-bart-explainer-high-energy.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

barty-bart. (2026). explainer-high-energy security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-explainer-high-energy/audits/1

Цитата BibTeX

@techreport{barty-bart-barty-bart-explainer-high-energy-2026,
  author = {barty-bart},
  title = {explainer-high-energy security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/barty-bart-explainer-high-energy/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "explainer-high-energy security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-explainer-high-energy/audits/1"
identifiers:
  - type: other
    value: "skillstore:barty-bart-explainer-high-energy:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Product Launch Teaser

Turn an approved product brief into a short launch video with a clear message, branded typography, and an end card.

Vertical Campaign Promo

Plan a portrait-format promo using verified benefits, supplied brand assets, and synchronized music.

Code-Based Motion Prototype

Develop a seekable HTML animation, inspect scene contact sheets, and review a draft before rendering the final video.

Попробуйте эти промпты

Beginner: Create a First Promo

Create a 15-second promo for [product], which [verified function]. Use the default landscape format and synthesized music. Ask for missing brief details together.

Intermediate: Apply Brand Direction

Plan a 9:16 promo for [product] using [brand colors] and [supplied fonts]. Emphasize [verified benefit]. Use only these approved claims: [claims].

Advanced: Synchronize a Supplied Track

Build a 12-20 second promo using [approved music file]. Match scene changes to its measured tempo. Include [real interaction] and [approved call to action].

Expert: Review and Render Safely

Build deterministic HTML from [approved beat sheet]. Use unique temporary directories and restricted browser access. Review contact sheets and a draft before final rendering.

Лучшие практики

Provide verified product wording, authorized brand assets, and one main message before planning scenes.
Review contact sheets and the draft for readability, accurate claims, and synchronization before starting the final render.
Render trusted HTML in an isolated workspace after hardening temporary-directory cleanup and browser file access.

Избегать

Inventing customer counts, ratings, discounts, or testimonials to make the promo appear more persuasive.
Adding too many ideas per scene or using text that cannot be read during its display time.
Rendering untrusted HTML with expanded file access or reusing an output directory containing unrelated files.

Часто задаваемые вопросы

Which AI tools are supported?

The skill targets Claude, Codex, and Claude Code. Rendering also requires a local environment with the stated dependencies.

What files does the workflow produce?

The workflow produces interactive HTML, review stills, a draft MP4, and final video exports. Audio export requires the page's audio-building function.

Which video lengths and formats are covered?

The style targets 12-20 seconds, with a 15-second default. Standard formats are 1920 by 1080 and 1080 by 1920.

Can it use my brand and website?

Yes. It can use supplied colors, fonts, and authorized logos. A supplied website provides product wording and brand references.

Does it require a music subscription?

No. The instructions describe synthesizing music and effects with Web Audio. You can instead supply a music file you are authorized to use.

Is the included renderer suitable for untrusted HTML?

Not without hardening. Restrict browser file access and requests, and replace predictable recursive temporary-directory cleanup before rendering untrusted content.