Навыки markstream-angular
📦

markstream-angular

Ревизия содержимого r1 Средний риск ⚙️ Внешние команды

Integrate Markstream into Angular Apps

Angular teams need a clear path for adding Markdown rendering without unsafe defaults or unnecessary dependencies. This skill guides standalone setup, streaming behavior, CSS imports, and explicit trusted-content boundaries.

Поддерживает: Claude Codex Code(CC)
📊 69 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "markstream-angular" from https://skillstore.io/skills/simon-he95-markstream-angular.md and its manifest at https://skillstore.io/api/skills/simon-he95-markstream-angular/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/simon-he95-markstream-angular.md Подписанный manifest GET /api/skills/simon-he95-markstream-angular/manifest Подписанный lockfile GET /api/skills/simon-he95-markstream-angular/lockfile

Протестировать

Использование «markstream-angular». Add a basic Markdown message component to my Angular application.

Ожидаемый результат:

  • A standalone component integration plan.
  • The component import and content binding to use.
  • The Markstream stylesheet import location.

Использование «markstream-angular». My chat shows live tokens and later reloads complete history.

Ожидаемый результат:

  • Streaming uses smooth pacing with the cursor enabled.
  • Recovered history disables pacing and uses fade animation.
  • The final flag marks completion after visible content catches up.

Использование «markstream-angular». Can I allow custom HTML tags in Markdown?

Ожидаемый результат:

  • Use custom tag settings only for a documented trusted-content boundary.
  • Keep the safe HTML policy for user-controlled or streamed content.

Аудит безопасности

Средний риск
v1 • 19.07.2026 Открыть версионный отчет

All 26 static findings are false positives. They result from Markdown inline code and documentation paths, not Ruby, shell, or reconnaissance behavior. The skill does document a security-sensitive trusted-rendering opt-out that can reduce protections when its trust boundary is misapplied.

2
Просканировано файлов
52
Проанализировано строк
0
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний
SKILL.md:39
Trusted Rendering Opt-Out Can Reduce Content Safety
The guidance permits disabling the safe HTML policy and Mermaid strict mode for trusted legacy content. A mistaken trust classification could expose rendered content to unsafe HTML or diagram behavior.
The line explicitly instructs users how to opt out of two protective defaults, while also limiting this to trusted surfaces and requiring documentation.

Факторы риска

⚙️ Внешние команды (24)
SKILL.md:13 SKILL.md:14 SKILL.md:15 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:36 SKILL.md:38 SKILL.md:39 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46
Аудитор:: claude
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/simon-he95-markstream-angular/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/simon-he95-markstream-angular/security.svg)](https://skillstore.io/skills/simon-he95-markstream-angular?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/simon-he95-markstream-angular?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/simon-he95-markstream-angular/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/simon-he95-markstream-angular.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

simon-he95. (2026). markstream-angular security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/simon-he95-markstream-angular/audits/1

Цитата BibTeX

@techreport{simon-he95-simon-he95-markstream-angular-2026, author = {simon-he95}, title = {markstream-angular security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/simon-he95-markstream-angular/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "markstream-angular security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "simon-he95" date-released: "2026-07-19" url: "https://skillstore.io/skills/simon-he95-markstream-angular/audits/1" identifiers: - type: other value: "skillstore:simon-he95-markstream-angular:audit:1" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
85
Сопровождаемость
87
Контент
65
Сообщество
83
Соответствие спецификации

Что вы можете построить

Add Markdown to a standalone app

Set up a standalone Angular component with Markstream imports, content binding, and required styles.

Build a streaming chat view

Configure smooth streaming, cursor behavior, fade settings, and the final state for an AI chat interface.

Migrate a trusted legacy renderer

Preserve a documented trusted rendering workflow while keeping safe defaults for all other content.

Попробуйте эти промпты

Start a basic integration 
Add markstream-angular to this Angular app. Use a standalone component, bind a Markdown string to content, and list the required stylesheet imports.
Add math support 
Integrate markstream-angular with optional KaTeX support. Keep dependencies minimal and show where each stylesheet belongs.
Configure streaming chat 
Create an Angular chat message component using markstream-angular. Configure streaming, fade, typewriter, and final-state behavior for live and recovered messages.
Review a trusted renderer 
Review this Angular markstream integration. Keep safe HTML and strict Mermaid defaults, then identify any narrowly justified trusted-content exceptions and document their boundaries.

Лучшие практики

  • Confirm the repository uses Angular before changing integration code.
  • Keep HTML sanitization and Mermaid strict mode enabled for untrusted content.
  • Install optional peers only when the requested feature requires them.

Избегать

  • Do not disable HTML safety for user-controlled Markdown.
  • Do not apply streaming pacing to already complete history content.
  • Do not introduce NgModule patterns unless the existing application requires them.

Часто задаваемые вопросы

Does this skill support standalone Angular components?
Yes. It prefers standalone component imports and signal-friendly examples.
When should I add KaTeX styles?
Add KaTeX styles only when the application enables math rendering.
How should live chat messages be configured?
Use content binding, smooth streaming, and a final state when the stream completes.
How should saved chat history be rendered?
Disable smooth pacing for complete content and use fade if desired.
Can I use trusted HTML mode?
Only for a documented, genuinely trusted content surface after security review.
Does the skill validate the application?
It recommends the smallest useful Angular development or build command.

Сведения для разработчиков

Автор

simon-he95

Лицензия

MIT

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/simon-he95/markstream-vue/tree/6d75c25888c10809bf938931ebd78127583fa2dd/.agents/skills/markstream-angular

Ссылка

aeb1814252a7125c8b732442bf1e7f2cd1f686c1

Актуальность поддержки

19.07.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📁 agents/

📄 openai.yaml

📄 SKILL.md