Навыки softsync-website-content

📦

softsync-website-content

Name: softsync-website-content
Author: softsync-lab

Ревизия содержимого r1 Безопасно 📁 Доступ к файловой системе🔑 Переменные окружения⚙️ Внешние команды

Manage Website Content with SoftSync

Website content becomes harder to maintain when page text and media are scattered across source files. This skill guides assistants through SoftSync workspace workflows for drafts, media, and website integration.

Поддерживает: Claude Codex Code(CC)

📊 74 Адекватно

Maintain this Skill? Claim it 📊 74 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "softsync-website-content" from https://skillstore.io/skills/softsync-lab-softsync-website-content.md and its manifest at https://skillstore.io/api/skills/softsync-lab-softsync-website-content/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/softsync-lab-softsync-website-content.md Подписанный manifest GET /api/skills/softsync-lab-softsync-website-content/manifest Подписанный lockfile GET /api/skills/softsync-lab-softsync-website-content/lockfile

Протестировать

Использование «softsync-website-content». Draft a product update using approved release notes without publishing it.

Ожидаемый результат:

Status: Draft for team review.
Title: Product Update.
Summary: This update explains the changes listed in the approved release notes.
Sections: Overview, confirmed changes, and next steps.
Review note: Confirm any missing release date before publication.

Использование «softsync-website-content». Review our website content integration before launch.

Ожидаемый результат:

Production check: Visitors should see published rows only; unpublished pages should return 404.
Credential check: API requests should run on the server, with no API key in browser code.
Media check: Confirm image descriptions, supported video links, and safe Markdown rendering.
Preview check: Keep draft visibility restricted to development or authorized preview access.

Аудит безопасности

Безопасно

v1 • 02.11.2026 Открыть версионный отчет

All nine static findings are false positives involving Markdown examples, table relationships, tool identifiers, or intended API authentication. Credential guidance requires server-only use and prohibits public disclosure. No evidence found of malicious commands, credential exfiltration, or prompt injection in the two reviewed files.

Просканировано файлов

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Факторы риска

📁 Доступ к файловой системе (2)

references/using-softsync-as-cms.md:32 references/using-softsync-as-cms.md:33

🔑 Переменные окружения (1)

references/using-softsync-as-cms.md:11

⚙️ Внешние команды (5)

SKILL.md:10 SKILL.md:13 SKILL.md:14 SKILL.md:15 SKILL.md:18

Последний завершенный статический и семантический аудит не обнаружил подтвержденных проблем безопасности. Это не доказывает отсутствие побочных эффектов у навыка.

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/softsync-lab-softsync-website-content/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/softsync-lab-softsync-website-content/security.svg)](https://skillstore.io/skills/softsync-lab-softsync-website-content?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/softsync-lab-softsync-website-content?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/softsync-lab-softsync-website-content/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/softsync-lab-softsync-website-content.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

softsync-lab. (2026). softsync-website-content security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/softsync-lab-softsync-website-content/audits/1

Цитата BibTeX

@techreport{softsync-lab-softsync-lab-softsync-website-content-2026,
  author = {softsync-lab},
  title = {softsync-website-content security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/softsync-lab-softsync-website-content/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "softsync-website-content security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "softsync-lab"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/softsync-lab-softsync-website-content/audits/1"
identifiers:
  - type: other
    value: "skillstore:softsync-lab-softsync-website-content:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Prepare a blog draft

Create a draft post with ordered sections, a clear summary, and notes for facts that still need confirmation.

Connect a website to workspace content

Plan server-side content loading, publication filters, media rendering, and cache settings using the workspace schema.

Review a campaign page

Read an existing page, propose targeted text changes, and prepare draft additions without replacing human writing before approval.

Попробуйте эти промпты

Inspect available content

Inspect my SoftSync workspace schema and list the tables used for website posts and sections. Do not change any records.

Create a first draft

Create a draft post about [topic] using these verified notes: [notes]. Add ordered sections and flag missing facts. Do not publish.

Update a page with media

Read [page] and propose changes for [goal], including image descriptions and video placement. Ask before replacing existing text and leave new content as drafts.

Integrate content and preview

Inspect this website and workspace schema. Implement server-side content loading, published-only production views, documented media rendering, and restricted draft preview. Verify draft isolation.

Лучшие практики

Inspect the workspace schema and read existing records before choosing fields or making changes.
Keep credentials server-side and verify that production pages never expose drafts.
Use verified facts, descriptive image text, and draft notes for unresolved information.

Избегать

Publishing drafts automatically or replacing human-written text without approval.
Putting the API key in browser code, project instructions, screenshots, or public repositories.
Rendering unchecked raw HTML or enabling draft visibility on the live site.

Часто задаваемые вопросы

Does this skill publish posts automatically?

No. It instructs assistants to leave new posts as drafts so the team can review and publish them.

What setup does it require?

You need a SoftSync workspace and compatible workspace tools or API access. Website integration also requires server-side credential handling.

Can it change existing page text?

Yes, through available workspace tools or API access. It requires reading first, limiting changes to the request, and asking before replacing human writing.

Which media formats does it document?

It covers Markdown images, size and alignment options, YouTube, Vimeo, Loom, and uploaded MP4 or WebM video links.

Where should the API key be stored?

Use the SOFTSYNC_API_KEY environment variable on the server. Never place the key in browser code, saved project instructions, or public repositories.

Does it include a working website or renderer?

No. It provides integration instructions and expects an existing website renderer that supports the documented Markdown extensions.