Навыки markstream-migration

📦

markstream-migration

Name: markstream-migration
Author: simon-he95

Ревизия содержимого r1 Безопасно ⚙️ Внешние команды

Migrate Markdown Rendering Safely

Replacing a Markdown renderer can break rendering, streaming, and HTML safety rules. This skill creates a migration plan that preserves behavior and documents remaining gaps.

Поддерживает: Claude Codex Code(CC)

📊 74 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "markstream-migration" from https://skillstore.io/skills/simon-he95-markstream-migration.md and its manifest at https://skillstore.io/api/skills/simon-he95-markstream-migration/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/simon-he95-markstream-migration.md Подписанный manifest GET /api/skills/simon-he95-markstream-migration/manifest Подписанный lockfile GET /api/skills/simon-he95-markstream-migration/lockfile

Протестировать

Использование «markstream-migration». Audit a project that uses react-markdown with custom code blocks.

Ожидаемый результат:

Migration class: renderer-custom.
Direct mapping: standard Markdown content.
Review needed: custom code block rendering and raw HTML policy.

Использование «markstream-migration». Review a Vue 3 chat that streams Markdown content.

Ожидаемый результат:

Use chat mode for the active chat row.
Keep smooth streaming enabled when only output pacing is needed.
Validate completed history with streaming disabled.

Аудит безопасности

Безопасно

v1 • 19.07.2026 Открыть версионный отчет

All 20 external-command alerts are false positives caused by Markdown inline-code formatting in SKILL.md. The system-reconnaissance alert is also a false positive because it directs a security review of renderer behavior. No prompt injection, exfiltration intent, or executable command was found.

Просканировано файлов

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Факторы риска

⚙️ Внешние команды (20)

Последний завершенный статический и семантический аудит не обнаружил подтвержденных проблем безопасности. Это не доказывает отсутствие побочных эффектов у навыка.

Аудитор:: claude

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/simon-he95-markstream-migration/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/simon-he95-markstream-migration/security.svg)](https://skillstore.io/skills/simon-he95-markstream-migration?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/simon-he95-markstream-migration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/simon-he95-markstream-migration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/simon-he95-markstream-migration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

simon-he95. (2026). markstream-migration security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/simon-he95-markstream-migration/audits/1

Цитата BibTeX

@techreport{simon-he95-simon-he95-markstream-migration-2026,
  author = {simon-he95},
  title = {markstream-migration security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/simon-he95-markstream-migration/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "markstream-migration security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "simon-he95"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/simon-he95-markstream-migration/audits/1"
identifiers:
  - type: other
    value: "skillstore:simon-he95-markstream-migration:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Replace a simple renderer

Identify a low-risk renderer swap and preserve existing user-visible Markdown behavior.

Migrate a customized chat UI

Review custom renderers and streaming settings before moving an AI chat interface to Markstream.

Assess complex Markdown pipelines

Document plugin, sanitization, and HTML gaps before deciding whether a migration is appropriate.

Попробуйте эти промпты

Find the current renderer

Audit this repository for its current Markdown renderer. List every call site and classify the migration risk.

Plan a safe swap

Create a Markstream migration plan for the current Markdown renderer. Preserve styles and visible behavior first.

Review custom rendering

Map the custom Markdown renderers in this project to scoped Markstream component overrides. List any unsupported behavior.

Assess streaming and security

Review this chat Markdown migration for streaming, raw HTML, URL policy, and Mermaid risks. Recommend safe Markstream settings and validation steps.

Лучшие практики

Audit call sites and security settings before replacing the renderer.
Preserve current behavior before adding Markstream-specific features.
Run the smallest relevant test or build after each migration stage.

Избегать

Do not claim full parity before reviewing plugins and custom renderers.
Do not enable trusted HTML globally to match one legacy call site.
Do not move to nodes streaming when content streaming is sufficient.

Часто задаваемые вопросы

What does this skill audit?

It audits Markdown renderers, call sites, custom rendering, plugins, HTML handling, and streaming behavior.

Does it migrate code automatically?

It provides a migration workflow and recommendations. Code changes require a separate user request.

When is a migration direct?

A migration is direct when the application passes simple Markdown strings with little custom parser behavior.

How does it handle custom renderers?

It maps tag-based rendering to scoped Markstream component overrides and records behavior that needs manual work.

Does it review HTML safety?

Yes. It identifies raw HTML, URL policy, sanitization, and Mermaid settings that need application-specific review.

When should nodes streaming be used?

Use nodes only for AST control, worker preparsing, or frequent structural updates. Use content streaming for simpler pacing.

Сведения для разработчиков

Автор

simon-he95

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/simon-he95/markstream-vue/tree/6d75c25888c10809bf938931ebd78127583fa2dd/.agents/skills/markstream-migration

Ссылка

aeb1814252a7125c8b732442bf1e7f2cd1f686c1

Актуальность поддержки

19.07.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📁 agents/

📄 openai.yaml

📁 references/

📄 adoption-checklist.md

📄 SKILL.md