技能 cold-offer

📦

cold-offer

Name: cold-offer
Author: cmj-hub

内容修订 r1 高风险 🌐 网络访问⚙️ 外部命令📁 文件系统访问🔑 环境变量⚡ 包含脚本

Draft Cold Offers Around Concrete Findings

Cold outreach often asks for a purchase before showing useful work. This skill structures a finding, a small solution sample, and a first email with local draft checks.

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "cold-offer" from https://skillstore.io/skills/cmj-hub-cold-offer.md and its manifest at https://skillstore.io/api/skills/cmj-hub-cold-offer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/cmj-hub-cold-offer.md 已签名 manifest GET /api/skills/cmj-hub-cold-offer/manifest 已签名 lockfile GET /api/skills/cmj-hub-cold-offer/lockfile

测试它

正在使用“cold-offer”。 Draft an offer about a homepage requesting meetings before showing any work.

预期结果:

Finding: Your homepage asks for a meeting before showing a work sample.
Prototype: A one-page sample that presents the finding and a short trial first.
First email: Your homepage asks for a meeting before showing any work. I prepared a one-page alternative. May I share the full report?

正在使用“cold-offer”。 Check a complete draft whose first email says: Buy our retainer.

预期结果:

Result: Rejected because the first email contains a configured paid-product pitch phrase.
Revision: Share the specific finding and the prepared sample instead of asking for a purchase.

正在使用“cold-offer”。 Check a draft with a finding and first email but no prototype.

预期结果:

Result: Draft is incomplete.
Revision: Add a nonempty prototype description before checking again.

安全审计

高风险

v1 • 2026/10/3 打开版本化报告

Most static findings are harmless documentation, CSS, encoding markers, or legitimate local tooling. Confirmed risks affect optional asset renderers: unsafe HTML insertion, inline script serialization, CSS interpolation, and unconditional frame directory deletion. No evidence found of prompt injection, credential theft, or malicious exfiltration; the Python scorer performs local validation without network access.

已扫描文件

701

分析行数

复核项

已忽略误报

已确认安全问题 (2)

高

assets/demo.mjs:13-14 assets/demo.mjs:67-68

Inline Script Breakout Through Specification Data

The demo renderer embeds JSON.stringify output directly in a script element. Supplied strings containing a closing script tag can terminate it and inject executable markup.

JSON.stringify does not escape HTML script terminators. The browser parses these serialized values inside an executable script element before DOM insertion.

高

assets/card.mjs:17 assets/card.mjs:25-37 assets/demo.mjs:12 assets/demo.mjs:17-25

Unchecked Color Value Can Escape Style Elements

Both renderers interpolate supplied accent_color values directly into style elements. A crafted value can close the style element and introduce scripts or external resources.

Neither renderer validates accent_color before HTML interpolation. Text escaping elsewhere does not protect this separate style-element context.

能力复核项 (3)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

assets/demo.mjs:90

innerHTML assignment (XSS risk)

document.getElementById('lines').innerHTML = h;

Response lines from the supplied specification are concatenated into HTML without escaping. Malicious markup can execute browser event handlers during rendering.

高

assets/demo.mjs:91

innerHTML assignment (XSS risk)

document.getElementById('artwrap').innerHTML = (ART && t>=T_ART)

Artifact labels and lines from the specification are inserted as unescaped HTML. Crafted tags can execute browser scripts or initiate unwanted requests.

中

assets/demo.mjs:4

Synchronous file operations

import { readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';

The imported rmSync recursively deletes the output-derived frames directory at lines 102 and 119. Existing contents are removed without an ownership check.

风险因素

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/cmj-hub-cold-offer/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/cmj-hub-cold-offer/security.svg)](https://skillstore.io/skills/cmj-hub-cold-offer?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/cmj-hub-cold-offer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cmj-hub-cold-offer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/cmj-hub-cold-offer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

cmj-hub. (2026). cold-offer security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cmj-hub-cold-offer/audits/1

BibTeX 引用

@techreport{cmj-hub-cmj-hub-cold-offer-2026,
  author = {cmj-hub},
  title = {cold-offer security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/cmj-hub-cold-offer/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cold-offer security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "cmj-hub"
date-released: "2026-10-03"
url: "https://skillstore.io/skills/cmj-hub-cold-offer/audits/1"
identifiers:
  - type: other
    value: "skillstore:cmj-hub-cold-offer:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Founder Outreach

Draft a first email that shares a specific public-page observation and a small sample instead of requesting a demo.

Consulting Offer Preparation

Package a verified business finding with a limited solution sample before discussing a larger paid engagement.

Team Draft Review

Check draft completeness and configured pitch phrases before a human reviews the message for sending.

试试这些提示

Draft a First Offer

Draft a cold offer from this verified observation: [finding]. Include a finding, a small solution sample, and a first email without a product pitch.

Rewrite a Pitch

Rewrite this email: [draft]. Lead with [verified finding], name [prepared sample], and remove purchase requests, meeting requests, and demo invitations.

Validate a Draft

Review my draft at [local path]. Use the local scorer to check required fields and pitch phrases, then suggest revisions without sending anything.

Prepare and Review Variants

Create three offer variants from [verified finding] and [prepared sample]. Compare clarity, validate each locally, and explain limitations of the phrase checks.

最佳实践

Use verified public observations and describe only samples you have actually prepared.
Review scorer results manually because fixed phrase checks can reject harmless text or miss sales pitches.
Keep the core drafting workflow separate from optional asset renderers until their security issues are fixed.

避免

Inventing recipient problems or claiming unfinished work is already available.
Treating a successful scorer result as proof of accuracy, compliance, or effective outreach.
Passing untrusted specifications to the optional renderers or reusing directories containing important files.