📦

archify

Name: archify
Author: tt-a1i

v2.16 Ревизия содержимого r1 Средний риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе⚡ Содержит скрипты🔑 Переменные окружения

Create Validated Interactive Diagrams

Complex systems are difficult to explain with text alone. Archify creates validated, interactive diagrams from requirements, Mermaid, or repository evidence.

Поддерживает: Claude Codex Code(CC)

⚠️ 50 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "archify" from https://skillstore.io/skills/tt-a1i-archify.md and its manifest at https://skillstore.io/api/skills/tt-a1i-archify/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/tt-a1i-archify.md Подписанный manifest GET /api/skills/tt-a1i-archify/manifest Подписанный lockfile GET /api/skills/tt-a1i-archify/lockfile

Протестировать

Использование «archify». Show a web application with a browser, API, cache, database, queue, worker, and monitoring service.

Ожидаемый результат:

An interactive architecture artifact with trust boundaries, a clear request path, labeled asynchronous work, validation results, and delivery receipts.

Использование «archify». Explain a cache-miss request from the client through authentication, storage fallback, response, and asynchronous tracing.

Ожидаемый результат:

A sequence diagram with ordered participants, calls, returns, fallback behavior, and the tracing side effect.

Использование «archify». Map an analytics pipeline from collection through transformation, warehouse storage, governance, and reporting.

Ожидаемый результат:

A data-flow diagram with named datasets, transformations, ownership boundaries, storage stages, and downstream consumers.

Аудит безопасности

Средний риск

v4 • 31.08.2026 Открыть версионный отчет

Adjudication dismissed 394 of 400 presented matches as test fixtures, generated data, documentation, or bounded local tooling. Six confirmed URLs cause generated artifacts or the update workflow to contact remote hosts, and semantic review found that the updater runs automatically without prior disclosure. Static presentation was capped at 400 of 8,055 matches, so 7,655 unpresented matches require manual review before automatic publication. Static review was capped at 400/8055 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

190

Просканировано файлов

144,837

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний

SKILL.md:37-44 scripts/update-contract.mjs:1-3

Undisclosed Automatic Update Check

The skill directs the agent to run a packaged update checker after creating the first candidate and to hide successful or failed checks. The checker uses a remote manifest, creating an unrequested network request and local cache state.

The instruction explicitly requires the check and suppresses disclosure in normal and failure cases. The packaged contract defines the remote manifest endpoint.

Пункты проверки возможностей (6)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Низкий

assets/template.html:36

Hardcoded URL

Opening the generated HTML initiates an external Google Fonts connection, which exposes viewer network metadata and contradicts fully self-contained offline behavior.

Низкий

assets/template.html:37

Hardcoded URL

Opening the generated HTML initiates an external Google Fonts connection, which exposes viewer network metadata and contradicts fully self-contained offline behavior.

Низкий

examples/dataflow-product-analytics.html:36

Hardcoded URL

Opening the generated HTML initiates an external Google Fonts connection, which exposes viewer network metadata and contradicts fully self-contained offline behavior.

Низкий

examples/dataflow-product-analytics.html:37

Hardcoded URL

Opening the generated HTML initiates an external Google Fonts connection, which exposes viewer network metadata and contradicts fully self-contained offline behavior.

Низкий

scripts/update-contract.mjs:3

Hardcoded URL

export const DEFAULT_MANIFEST_URL = 'https://tt-a1i.github.io/archify/skill-updates/archify/stable.j

This URL is the configured remote manifest used by the automatic update-check workflow. The check creates an outbound request after diagram authoring begins.

Низкий

skill-release.json:9

Hardcoded URL

"updateManifestUrl": "https://tt-a1i.github.io/archify/skill-updates/archify/stable.json"

This URL is the configured remote manifest used by the automatic update-check workflow. The check creates an outbound request after diagram authoring begins.

Факторы риска

⚙️ Внешние команды (50)

assets/template.html:5625 assets/template.html:5677 bin/archify.mjs:3 bin/archify.mjs:51 bin/archify.mjs:16-35 bin/archify.mjs:45 bin/archify.mjs:47 bin/archify.mjs:78 bin/archify.mjs:128 bin/archify.mjs:129 bin/archify.mjs:207 bin/archify.mjs:216 bin/archify.mjs:217 bin/archify.mjs:236 bin/archify.mjs:237 bin/archify.mjs:296 bin/archify.mjs:304 bin/archify.mjs:329 bin/archify.mjs:334 bin/archify.mjs:358 bin/archify.mjs:366 bin/archify.mjs:500 bin/archify.mjs:507 bin/archify.mjs:519 bin/archify.mjs:527 bin/archify.mjs:550 bin/archify.mjs:564 bin/archify.mjs:636 bin/archify.mjs:669 bin/archify.mjs:670 bin/archify.mjs:671 bin/archify.mjs:691 bin/archify.mjs:758 bin/archify.mjs:778 bin/archify.mjs:779 bin/archify.mjs:793 bin/archify.mjs:797 bin/archify.mjs:819 bin/archify.mjs:845 bin/archify.mjs:870 bin/archify.mjs:938 bin/archify.mjs:959 bin/archify.mjs:980 bin/archify.mjs:1036 bin/archify.mjs:1061 bin/archify.mjs:1093 bin/archify.mjs:1100 bin/archify.mjs:1102 bin/archify.mjs:1104 bin/archify.mjs:1105

🌐 Доступ к сети (50)

assets/template.html:36 assets/template.html:37 assets/template.html:40 bin/open-artifact.mjs:80 bin/open-artifact.mjs:79 bin/open-artifact.mjs:80 bin/preview.mjs:128 bin/preview.mjs:266 bin/preview.mjs:332 bin/preview.mjs:13 brand-marks/catalog.json:14 brand-marks/catalog.json:15 brand-marks/catalog.json:13 examples/dataflow-product-analytics.html:36 examples/dataflow-product-analytics.html:37 examples/dataflow-product-analytics.html:40 examples/lifecycle-agent-run.html:36 examples/lifecycle-agent-run.html:37 examples/lifecycle-agent-run.html:40 examples/sequence-cache-miss-request.html:36 examples/sequence-cache-miss-request.html:37 examples/sequence-cache-miss-request.html:40 examples/web-app-rendered.html:36 examples/web-app-rendered.html:37 examples/web-app-rendered.html:40 examples/workflow-agent-tool-call-rendered.html:36 examples/workflow-agent-tool-call-rendered.html:37 examples/workflow-agent-tool-call-rendered.html:40 package-lock.json:26 package-lock.json:38 package-lock.json:43 package-lock.json:49 package-lock.json:53 package-lock.json:60 package-lock.json:68 package-lock.json:73 package-lock.json:80 package-lock.json:87 package-lock.json:95 package-lock.json:100 package-lock.json:110 package-lock.json:123 package-lock.json:129 package-lock.json:133 package-lock.json:143 references/brand-marks.md:30 references/brand-marks.md:41 renderers/shared/brand-marks.mjs:181 renderers/shared/generated-brand-marks.mjs:18 renderers/shared/generated-brand-marks.mjs:38

📁 Доступ к файловой системе (50)

assets/template.html:6060 assets/template.html:6066 assets/template.html:7965 assets/template.html:7966 bin/archify.mjs:345 bin/archify.mjs:349 bin/archify.mjs:356 bin/archify.mjs:363 bin/archify.mjs:364 bin/archify.mjs:409 bin/archify.mjs:497 bin/archify.mjs:504 bin/archify.mjs:517 bin/archify.mjs:575 bin/archify.mjs:576 bin/archify.mjs:622 bin/archify.mjs:623 bin/archify.mjs:636 bin/archify.mjs:689 bin/archify.mjs:769 bin/archify.mjs:817 bin/archify.mjs:868 bin/archify.mjs:957 bin/archify.mjs:1059 bin/archify.mjs:1109 bin/archify.mjs:1468 bin/archify.mjs:1618 bin/archify.mjs:1690 bin/archify.mjs:1710 bin/archify.mjs:1758 bin/archify.mjs:1772 bin/archify.mjs:1803 bin/archify.mjs:1907 bin/archify.mjs:1928 bin/archify.mjs:325 bin/archify.mjs:326 bin/archify.mjs:344 bin/archify.mjs:363 bin/archify.mjs:1226 bin/archify.mjs:1227 bin/archify.mjs:1233 bin/archify.mjs:1234 bin/archify.mjs:1240 bin/archify.mjs:1241 bin/archify.mjs:1247 bin/archify.mjs:1248 bin/archify.mjs:1254 bin/archify.mjs:1255 bin/archify.mjs:1261 bin/archify.mjs:1262

⚡ Содержит скрипты (21)

🔑 Переменные окружения (50)

bin/archify.mjs:55 bin/preview.mjs:516 bin/visual-check.mjs:107 bin/visual-check.mjs:250 bin/visual-check.mjs:294 renderers/shared/brand-marks.mjs:124 renderers/shared/brand-marks.mjs:152 renderers/shared/brand-marks.mjs:173 renderers/shared/brand-marks.mjs:124 renderers/shared/brand-marks.mjs:152 renderers/shared/brand-marks.mjs:173 renderers/shared/cli.mjs:27 renderers/shared/cli.mjs:155 renderers/shared/cli.mjs:27 renderers/shared/cli.mjs:155 renderers/shared/diagnostics.mjs:4 renderers/shared/diagnostics.mjs:4 renderers/shared/geometry.mjs:949 renderers/shared/geometry.mjs:949 renderers/workflow/render-workflow.mjs:16 renderers/workflow/render-workflow.mjs:16 scripts/check-update.mjs:1393 scripts/check-update.mjs:1397 scripts/check-update.mjs:1637 scripts/check-update.mjs:1393 scripts/check-update.mjs:1397 scripts/check-update.mjs:1637 test/brand-marks.test.mjs:356 test/brand-marks.test.mjs:357 test/brand-marks.test.mjs:377 test/brand-marks.test.mjs:378 test/brand-marks.test.mjs:44 test/brand-marks.test.mjs:58 test/brand-marks.test.mjs:81 test/brand-marks.test.mjs:356 test/brand-marks.test.mjs:357 test/brand-marks.test.mjs:377 test/brand-marks.test.mjs:378 test/clean-skill-staging.test.mjs:235 test/cli.test.mjs:35 test/cli.test.mjs:51 test/cli.test.mjs:20 test/cli.test.mjs:35 test/cli.test.mjs:50 test/cli.test.mjs:51 test/cli.test.mjs:240 test/cli.test.mjs:257 test/cli.test.mjs:667 test/cli.test.mjs:784 test/cli.test.mjs:797

Аудитор:: codex Посмотреть историю аудитов →

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/tt-a1i-archify/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/tt-a1i-archify/security.svg)](https://skillstore.io/skills/tt-a1i-archify?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/tt-a1i-archify?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tt-a1i-archify/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/tt-a1i-archify.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

tt-a1i. (2026). archify security audit report (audit version 4) [Author version 2.16]. Skillstore. https://skillstore.io/skills/tt-a1i-archify/audits/4

Цитата BibTeX

@techreport{tt-a1i-tt-a1i-archify-2026,
  author = {tt-a1i},
  title = {archify security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/tt-a1i-archify/audits/4},
  note = {Author version 2.16}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "archify security audit report (audit version 4)"
version: "2.16"
type: report
authors:
  - name: "tt-a1i"
date-released: "2026-08-31"
url: "https://skillstore.io/skills/tt-a1i-archify/audits/4"
identifiers:
  - type: other
    value: "skillstore:tt-a1i-archify:audit:4"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Document a Service Architecture

Map runtime components, trust boundaries, dependencies, and the primary request path for engineering documentation.

Explain an Operational Workflow

Show owners, decisions, approvals, failure paths, and rollback steps in a readable process diagram.

Trace Data and API Behavior

Visualize message order, asynchronous work, data transformations, storage, lineage, and downstream consumers.

Попробуйте эти промпты

Create a Basic Architecture

Create an architecture diagram for [system]. Show users, core services, storage, external dependencies, and the primary request path.

Convert Mermaid

Convert this Mermaid [flowchart, sequenceDiagram, or stateDiagram] into a polished Archify diagram: [paste Mermaid]. Preserve meaning and labels.

Map a Production Workflow

Create a workflow for [process]. Separate owners into lanes and show approvals, blocking checks, failure handling, rollback, and recovery verification.

Build an Evidence-Based Architecture

Inspect [repository path] and create an architecture diagram pinned to [commit]. Cite source evidence and mark every unsupported fact as unknown.

Лучшие практики

Provide exact component names, boundaries, protocols, and known failure paths.
Start with one primary path and add only details that improve understanding.
Validate after each focused correction and deliver only after all required checks pass.

Избегать

Do not invent repository facts, ownership, regions, protocols, or security boundaries.
Do not add manual routing controls before diagnostics identify a geometry problem.
Do not claim visual quality from automated checks without an actual visual review.