📦

gemdesign-skill

Name: gemdesign-skill
Author: gemdesign-ai

v0.1.1 Ревизия содержимого r1 Высокий риск 📁 Доступ к файловой системе⚙️ Внешние команды🌐 Доступ к сети

Design GemDesign Prototype Pages

Turning requirements into consistent, interactive prototypes can take significant design and engineering time. This skill converts page requirements into validated GemDesign prototypes with local preview and platform synchronization.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "gemdesign-skill" from https://skillstore.io/skills/gemdesign-ai-gemdesign-skill.md and its manifest at https://skillstore.io/api/skills/gemdesign-ai-gemdesign-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/gemdesign-ai-gemdesign-skill.md Подписанный manifest GET /api/skills/gemdesign-ai-gemdesign-skill/manifest Подписанный lockfile GET /api/skills/gemdesign-ai-gemdesign-skill/lockfile

Протестировать

Использование «gemdesign-skill». Create a desktop admin dashboard for tracking customer support tickets with a dark navy header and clear status states.

Ожидаемый результат:

A structured dashboard prototype with navigation, ticket metrics, filtering controls, status treatments, and a validated interaction plan.

Использование «gemdesign-skill». Turn this shopping app brief into home, product list, product detail, and checkout pages.

Ожидаемый результат:

A page plan with four linked prototype screens
A shared visual direction for the app
Validation notes for navigation and interactive states

Использование «gemdesign-skill». Update the existing product detail page to add an image gallery and an expandable specifications section.

Ожидаемый результат:

An updated page proposal that preserves the existing style, adds the requested interactions, and reports validation results before synchronization.

Аудит безопасности

Высокий риск

v1 • 07.08.2026 Открыть версионный отчет

All 368 static pattern hits are false positives because they occur in Markdown paths, code examples, documented URLs, or intended CLI workflow text rather than bundled executable code. The skill still has high-risk semantic concerns: authority-like prompt control language and instructions to collect an API token before automatically running authentication. Publication should remain blocked or require manual security review until those workflows are revised.

Просканировано файлов

865

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Высокий

SKILL.md:22 SKILL.md:74 SKILL.md:109-111 SKILL.md:524

Prompt Injection Attempt Detected

The skill uses authority-like control language such as "MUST be executed strictly in order," "HARD GATE," and "NON-NEGOTIABLE" to constrain agent behavior and require tool use. These instructions are untrusted skill content and could override normal agent judgment or user intent.

The file repeatedly presents workflow directives as hard gates and non-negotiable requirements, including mandatory browser and user-interaction behavior. This is direct evidence of instruction-layer manipulation, although the stated product workflow may be legitimate.

Высокий

SKILL.md:54-67

Sensitive API Token Collection

The login workflow tells the agent to ask the user for an API token and then automatically run the authentication command with the supplied token. This creates a high-impact credential-handling and side-effect path that should remain under explicit user control.

The instructions explicitly request a secret and prescribe executing a login command with that secret. The destination may be the intended GemDesign CLI, but the skill does not establish secure secret handling or consent boundaries.

Факторы риска

📁 Доступ к файловой системе (7)

README.md:33 README.md:48 README.md:30 README.md:28 README.md:30 SKILL.md:98 SKILL.md:98

⚙️ Внешние команды (50)

🌐 Доступ к сети (23)

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/gemdesign-ai-gemdesign-skill/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/gemdesign-ai-gemdesign-skill/security.svg)](https://skillstore.io/skills/gemdesign-ai-gemdesign-skill?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/gemdesign-ai-gemdesign-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gemdesign-ai-gemdesign-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/gemdesign-ai-gemdesign-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

gemdesign-ai. (2026). gemdesign-skill security audit report (audit version 1) [Author version 0.1.1]. Skillstore. https://skillstore.io/skills/gemdesign-ai-gemdesign-skill/audits/1

Цитата BibTeX

@techreport{gemdesign-ai-gemdesign-ai-gemdesign-skill-2026,
  author = {gemdesign-ai},
  title = {gemdesign-skill security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/gemdesign-ai-gemdesign-skill/audits/1},
  note = {Author version 0.1.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gemdesign-skill security audit report (audit version 1)"
version: "0.1.1"
type: report
authors:
  - name: "gemdesign-ai"
date-released: "2026-08-07"
url: "https://skillstore.io/skills/gemdesign-ai-gemdesign-skill/audits/1"
identifiers:
  - type: other
    value: "skillstore:gemdesign-ai-gemdesign-skill:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

100

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Turn a PRD into a prototype set

Convert a product requirements document into a page list, shared visual direction, and interactive prototype set for review.

Explore interface directions

Generate a page or design-system reference, inspect it in the local preview, and refine the visual direction before handoff.

Prepare validated page files

Retrieve existing GemDesign pages, apply structured changes, validate interaction rules, and synchronize approved files.

Попробуйте эти промпты

Create one page

Create a GemDesign prototype for a [page type]. Include these sections: [sections]. Use this visual direction: [style].

Map a product brief

Read this product brief and propose the required prototype pages. For each page, provide a readable page name, purpose, key states, and navigation relationships.

Refine an existing page

Retrieve the existing GemDesign page identified by [page ID]. Update [specific sections or interactions] while preserving the current style system. Validate the result and summarize the changes.

Generate a complete flow

Using this requirements document, generate a consistent multi-page GemDesign prototype. Establish a design-system baseline, match the app type, create the pages, validate each page, and list any unresolved requirements.

Лучшие практики

Describe the target users, page type, required states, and visual direction before generation.
Reuse an existing app and establish shared design rules before creating related pages.
Validate every page before saving it and review local output before synchronization.

Избегать

Do not generate pages before confirming the target app and its page type.
Do not skip validation or save partial files as finished prototypes.
Do not request or paste API tokens into chat when authenticating the CLI.

Часто задаваемые вопросы

What is GemDesign?

GemDesign is a platform for creating interactive UI prototype pages with a defined page specification and design workflow.

Can this create several pages at once?

Yes. Provide a requirements document and the skill can plan and generate a related set of prototype pages.

Does it support existing pages?

Yes. The workflow can retrieve an existing page, apply requested changes, validate it, and prepare it for saving.

Why is a local preview used?

The local preview helps you inspect incremental page output and interaction behavior before platform synchronization.

What must I provide?

Provide the page goal, required content, important states, target app type, and preferred visual direction.

Does the skill handle authentication?

The CLI requires authentication for platform actions. Authenticate through your own secure credential workflow before using synchronization commands.

Сведения для разработчиков

Автор

gemdesign-ai

Лицензия

MIT

Версия автора

v0.1.1

Ревизия Skillstore

Репозиторий

https://github.com/gemdesign-ai/skills/tree/ca88b50600845bdad3b0147695a84ccd60950a78/gemdesign-skill

Ссылка

6371cd04c89f5fca412585d1f9bf51e87a4ed3a3

Актуальность поддержки

08.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 README.md

📄 SKILL.md