Skills markstream-angular

📦

markstream-angular

Name: markstream-angular
Author: simon-he95

Content revision r1 Medium Risk ⚙️ External commands

Integrate Markstream into Angular Apps

Angular teams need a clear path for adding Markdown rendering without unsafe defaults or unnecessary dependencies. This skill guides standalone setup, streaming behavior, CSS imports, and explicit trusted-content boundaries.

Supports: Claude Codex Code(CC)

📊 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "markstream-angular" from https://skillstore.io/skills/simon-he95-markstream-angular.md and its manifest at https://skillstore.io/api/skills/simon-he95-markstream-angular/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/simon-he95-markstream-angular.md Signed manifest GET /api/skills/simon-he95-markstream-angular/manifest Signed lockfile GET /api/skills/simon-he95-markstream-angular/lockfile

Test it

Using "markstream-angular". Add a basic Markdown message component to my Angular application.

Expected outcome:

A standalone component integration plan.
The component import and content binding to use.
The Markstream stylesheet import location.

Using "markstream-angular". My chat shows live tokens and later reloads complete history.

Expected outcome:

Streaming uses smooth pacing with the cursor enabled.
Recovered history disables pacing and uses fade animation.
The final flag marks completion after visible content catches up.

Using "markstream-angular". Can I allow custom HTML tags in Markdown?

Expected outcome:

Use custom tag settings only for a documented trusted-content boundary.
Keep the safe HTML policy for user-controlled or streamed content.

Security Audit

Medium Risk

v1 • 7/19/2026 Open versioned report

All 26 static findings are false positives. They result from Markdown inline code and documentation paths, not Ruby, shell, or reconnaissance behavior. The skill does document a security-sensitive trusted-rendering opt-out that can reduce protections when its trust boundary is misapplied.

Files scanned

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:39

Trusted Rendering Opt-Out Can Reduce Content Safety

The guidance permits disabling the safe HTML policy and Mermaid strict mode for trusted legacy content. A mistaken trust classification could expose rendered content to unsafe HTML or diagram behavior.

The line explicitly instructs users how to opt out of two protective defaults, while also limiting this to trusted surfaces and requiring documentation.

Risk Factors

Audited by: claude

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/simon-he95-markstream-angular/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/simon-he95-markstream-angular/security.svg)](https://skillstore.io/skills/simon-he95-markstream-angular?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/simon-he95-markstream-angular?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/simon-he95-markstream-angular/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/simon-he95-markstream-angular.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

simon-he95. (2026). markstream-angular security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/simon-he95-markstream-angular/audits/1

BibTeX citation

@techreport{simon-he95-simon-he95-markstream-angular-2026,
  author = {simon-he95},
  title = {markstream-angular security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/simon-he95-markstream-angular/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "markstream-angular security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "simon-he95"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/simon-he95-markstream-angular/audits/1"
identifiers:
  - type: other
    value: "skillstore:simon-he95-markstream-angular:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Add Markdown to a standalone app

Set up a standalone Angular component with Markstream imports, content binding, and required styles.

Build a streaming chat view

Configure smooth streaming, cursor behavior, fade settings, and the final state for an AI chat interface.

Migrate a trusted legacy renderer

Preserve a documented trusted rendering workflow while keeping safe defaults for all other content.

Try These Prompts

Start a basic integration

Add markstream-angular to this Angular app. Use a standalone component, bind a Markdown string to content, and list the required stylesheet imports.

Add math support

Integrate markstream-angular with optional KaTeX support. Keep dependencies minimal and show where each stylesheet belongs.

Configure streaming chat

Create an Angular chat message component using markstream-angular. Configure streaming, fade, typewriter, and final-state behavior for live and recovered messages.

Review a trusted renderer

Review this Angular markstream integration. Keep safe HTML and strict Mermaid defaults, then identify any narrowly justified trusted-content exceptions and document their boundaries.

Best Practices

Confirm the repository uses Angular before changing integration code.
Keep HTML sanitization and Mermaid strict mode enabled for untrusted content.
Install optional peers only when the requested feature requires them.

Avoid

Do not disable HTML safety for user-controlled Markdown.
Do not apply streaming pacing to already complete history content.
Do not introduce NgModule patterns unless the existing application requires them.

Frequently Asked Questions

Does this skill support standalone Angular components?

Yes. It prefers standalone component imports and signal-friendly examples.

When should I add KaTeX styles?

Add KaTeX styles only when the application enables math rendering.

How should live chat messages be configured?

Use content binding, smooth streaming, and a final state when the stream completes.

How should saved chat history be rendered?

Disable smooth pacing for complete content and use fade if desired.

Can I use trusted HTML mode?

Only for a documented, genuinely trusted content surface after security review.

Does the skill validate the application?

It recommends the smallest useful Angular development or build command.

Developer Details

Author

simon-he95

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/simon-he95/markstream-vue/tree/6d75c25888c10809bf938931ebd78127583fa2dd/.agents/skills/markstream-angular

Ref

aeb1814252a7125c8b732442bf1e7f2cd1f686c1

Maintenance freshness

7/19/2026

Usage

0 downloads · 0 views

File structure

📁 agents/

📄 openai.yaml

📄 SKILL.md