Навыки yuanjing-image-connect
📦

yuanjing-image-connect

Ревизия содержимого r1 Средний риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе

Connect Yuanjing AI for Image Workflows

Desktop agents need account connection and installation checks before using Yuanjing AI. This skill guides setup and delegates authorized image tasks to the installed service skill.

Поддерживает: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 65 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "yuanjing-image-connect" from https://skillstore.io/skills/zhouguida123-svg-yuanjing-image-connect.md and its manifest at https://skillstore.io/api/skills/zhouguida123-svg-yuanjing-image-connect/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Протестировать

Использование «yuanjing-image-connect». Can I connect Yuanjing AI from a hosted agent without local execution?

Ожидаемый результат:

  • This environment cannot run the required local connection program.
  • Complete setup in a compatible desktop agent using the official installation instructions.
  • No installation or image generation was started.

Использование «yuanjing-image-connect». Create three product visuals from my photos, but I have not approved uploads or a budget.

Ожидаемый результат:

  • Please confirm permission to upload these photos for this task.
  • Provide a spending limit so the current exact quote can be checked before generation.
  • No image generation was started.

Аудит безопасности

Средний риск

Most static matches are Markdown formatting, a standard web path, or readable multilingual text rather than shell execution or obfuscation. The workflow does require local execution of downloaded authentication and connection programs, whose implementations are outside this audit. Mutable remote instructions and same-source checksums leave an external trust dependency; no evidence found of malicious intent or prompt injection in this file.

1
Просканировано файлов
22
Проанализировано строк
2
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний
Mutable Remote Instructions Control Installation
The agent follows live installation guidance and manifest-selected packages. Same-source SHA-256 checks do not independently authenticate releases against service compromise or malicious upstream changes.
These steps explicitly delegate current installation procedures and package selection to remote documents. No pinned release or independently trusted signature requirement appears in the file.
Пункты проверки возможностей (2)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Средний
Ruby/shell backtick execution
2. 有有效的本机源景凭据时,沿用现有凭据。首次连接时,按官方细则从清单的 `bootstrap.connect_url` 获取认证脚本,先校验 `bootstrap.connect_sha256`,
This step explicitly runs a downloaded authentication script locally with Node.js. Its source is absent, and a manifest-supplied checksum does not establish that its behavior is safe.
Средний
Ruby/shell backtick execution
4. 从已验证的正式技能目录执行官方 `scripts/yuanjing-agent-connect.cjs --wait-for-connection`,只读检查版本、认证和开放能力。分别确认连接、
This line instructs execution of an installed connection program with local account access. Its claimed read-only behavior cannot be verified because the executable is outside this audit.

Факторы риска

⚙️ Внешние команды (5)
🌐 Доступ к сети (1)
📁 Доступ к файловой системе (1)
Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/zhouguida123-svg-yuanjing-image-connect/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhouguida123-svg-yuanjing-image-connect/security.svg)](https://skillstore.io/skills/zhouguida123-svg-yuanjing-image-connect?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/zhouguida123-svg-yuanjing-image-connect?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhouguida123-svg-yuanjing-image-connect/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/zhouguida123-svg-yuanjing-image-connect.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

zhouguida123-svg. (2026). yuanjing-image-connect security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhouguida123-svg-yuanjing-image-connect/audits/1

Цитата BibTeX

@techreport{zhouguida123-svg-zhouguida123-svg-yuanjing-image-connect-2026, author = {zhouguida123-svg}, title = {yuanjing-image-connect security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/zhouguida123-svg-yuanjing-image-connect/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "yuanjing-image-connect security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "zhouguida123-svg" date-released: "2026-11-10" url: "https://skillstore.io/skills/zhouguida123-svg-yuanjing-image-connect/audits/1" identifiers: - type: other value: "skillstore:zhouguida123-svg-yuanjing-image-connect:audit:1" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
65
Сопровождаемость
87
Контент
65
Сообщество
74
Соответствие спецификации

Что вы можете построить

Connect a Design Workstation

Guide local authentication and verify installation before delegating image editing tasks.

Prepare Product Visuals

Pass approved product photos, visual requirements, and a confirmed budget to the connected image service.

Recover an Interrupted Image Task

Check the existing timed-out task and recover available results before starting another paid request.

Попробуйте эти промпты

Check Connection Readiness
Check whether this agent can connect to Yuanjing AI. Report prerequisites and current connection status without generating images. Ask before installing or running downloaded programs.
Connect an Account
Help me connect Yuanjing AI on this desktop. Verify installation checksums and ask before local execution. Keep authorization codes in local interactive prompts only.
Create Product Image Variations
Use Yuanjing AI to make [quantity] product visuals from [materials] with [constraints]. Confirm upload permission, available capabilities, and an exact quote within [budget] first.
Recover a Timed-Out Request
Investigate Yuanjing task [task identifier] after its timeout. Check the same task and recover original outputs. Do not create another paid task without approval.

Лучшие практики

  • Review downloaded components and verify release integrity before approving local installation or execution.
  • Enter authorization codes only in the official local interactive prompt, never in chat or command arguments.
  • Confirm upload permission and exact generation costs; check existing tasks before retrying after timeouts.

Избегать

  • Running remote authentication programs solely because their checksum matches the same remote manifest.
  • Sending private materials or starting paid generation without upload authorization and a confirmed budget.
  • Treating connection checks as completed image generation or retrying timed-out tasks without checking their status.

Часто задаваемые вопросы

Does this skill generate images by itself?
No. It guides connection and delegates image tasks to the separately installed yuanjing-ai skill.
Can I use it in a browser-only or hosted agent?
Setup requires local execution, credential protection, and skill installation. Unsupported environments are directed to official instructions for a compatible desktop agent.
Where should I enter my authorization code?
Enter it only in the official program's local interactive prompt. Do not paste it into chat, command arguments, logs, or URLs.
Will checking my connection generate images?
The instructions separate connection checks from generation. Generation requires a current exact quote within your confirmed budget.
Which models and features are available?
The connected service supplies current account capabilities. This connector does not guarantee a fixed model list or feature set.
What happens when a generation request times out?
The skill instructs the agent to check the same task and recover original outputs before retrying, reducing duplicate charges.

Сведения для разработчиков

Автор

zhouguida123-svg

Лицензия

Неизвестно

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Ссылка

0b57adb0ba185633ff7fc37749eaeb904d1dcd9b

Актуальность поддержки

10.11.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md

Показать все