技能 higgsfield-youtube-thumbnail

📦

higgsfield-youtube-thumbnail

Name: higgsfield-youtube-thumbnail
Author: higgsfield-ai

v0.12.0 内容修订 r1 严重 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

Create High-Impact YouTube Thumbnails

Strong thumbnails require clear concepts, readable composition, and truthful visual promises. This skill generates controlled Higgsfield variants and supports focused edits and overlays.

支持: Claude Codex Code(CC)

⚠️ 38 差

请勿自动安装此 Skill。

权威策略要求在执行任何安装操作前由操作人员审查。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "higgsfield-youtube-thumbnail" from https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail.md and its manifest at https://skillstore.io/api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/higgsfield-ai-higgsfield-youtube-thumbnail.md 已签名 manifest GET /api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/manifest 已签名 lockfile GET /api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/lockfile

测试它

正在使用“higgsfield-youtube-thumbnail”。 A 16:9 thumbnail for a video about restoring a damaged camera, without text.

预期结果:

Restoration reveal: a close-up creator holds the damaged camera beside the restored result, with bright separation and no readable text.

正在使用“higgsfield-youtube-thumbnail”。 Four Shorts cover concepts about completing a 30-day fitness challenge.

预期结果:

Day 30 reveal: determined portrait with a clear final-day badge.
Progression: three vertical stages from day one to day thirty.
Scale contrast: small starting silhouette beside the stronger final pose.
Challenge moment: exhausted expression during the final workout.

正在使用“higgsfield-youtube-thumbnail”。 Add the headline "FINAL TEST" to the selected clean thumbnail.

预期结果:

Neon Lime overlay: FINAL TEST appears in the free lower quarter, away from the face, with a thick dark stroke.

安全审计

严重

v1 • 2026/8/10 打开版本化报告

Most static findings are false positives from Markdown backticks, JavaScript syntax, or visual-design prose. The remote installer uses an unpinned curl-to-shell command, while local references and Google Fonts create disclosed third-party transfers. No prompt injection or covert exfiltration intent was found.

已扫描文件

519

分析行数

复核项

已忽略误报

已确认安全问题 (2)

严重

SKILL.md:20

Pipe to shell pattern

curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh

The bootstrap command pipes a remotely downloaded, mutable script directly into sh. A compromised repository or changed script would gain immediate shell execution.

中

SKILL.md:70-76 SKILL.md:165

Automatic Third-Party Upload of Local Images

Face photos and logos supplied as local paths are automatically uploaded to Higgsfield. These potentially sensitive assets leave the local environment.

The skill explicitly states that local paths are auto-uploaded and describes retrying a downloaded image as an uploaded media input.

能力复核项 (3)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

SKILL.md:20

Hardcoded URL

curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh

The URL points to a mutable installation script on a remote GitHub branch. No commit hash or integrity check pins the code that will execute.

低

references/text-overlay-bake.md:39

Hardcoded URL

The HTML preview loads Anton from Google Fonts, creating a real third-party network request. This is expected functionality but exposes the user's IP address to the font provider.

低

references/text-overlay-bake.md:140

Hardcoded URL

fontLink.href = 'https://fonts.googleapis.com/css2?family=Anton&display=swap';

The canvas workflow dynamically loads Anton from Google Fonts before rendering. This expected dependency creates a third-party request and a minor privacy and availability risk.

风险因素

⚙️ 外部命令 (40)

🌐 网络访问 (3)

references/text-overlay-bake.md:39 references/text-overlay-bake.md:140 SKILL.md:20

📁 文件系统访问 (1)

references/text-overlay-bake.md:171

检测到的模式

Pipe to shell pattern

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-youtube-thumbnail/security.svg)](https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-youtube-thumbnail/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/higgsfield-ai-higgsfield-youtube-thumbnail.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

higgsfield-ai. (2026). higgsfield-youtube-thumbnail security audit report (audit version 1) [Author version 0.12.0]. Skillstore. https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1

BibTeX 引用

@techreport{higgsfield-ai-higgsfield-ai-higgsfield-youtube-thumbnail-2026,
  author = {higgsfield-ai},
  title = {higgsfield-youtube-thumbnail security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1},
  note = {Author version 0.12.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "higgsfield-youtube-thumbnail security audit report (audit version 1)"
version: "0.12.0"
type: report
authors:
  - name: "higgsfield-ai"
date-released: "2026-08-10"
url: "https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1"
identifiers:
  - type: other
    value: "skillstore:higgsfield-ai-higgsfield-youtube-thumbnail:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 低

架构

100

可维护性

内容

社区

规范符合性

你能构建什么

Launch a YouTube Video

Create several truthful 16:9 thumbnail concepts with clear focal subjects and strong mobile readability.

Prepare Vertical Covers

Generate 9:16 Shorts covers or 4:5 Instagram covers while keeping faces in readable positions.

Maintain Brand Consistency

Use face references, logos, controlled variants, and focused edits across a recurring video series.

试试这些提示

Create a Basic Thumbnail

Create a truthful 16:9 YouTube thumbnail for a video titled "[title]" with one clear subject and no text.

Create Concept Variants

Create four distinct 16:9 concepts for "[topic]" using [face image], while preserving identity and avoiding unsupported claims.

Create a Vertical Cover

Create a 9:16 Shorts cover for "[topic]" with the face in the upper two-thirds and a two-word overlay.

Direct a Branded Variant Set

Create four branded variants for "[topic]" using [face images] and [logo], varying only concept, expression, and camera direction.

最佳实践

Provide the exact video promise, required scene details, target ratio, and approved reference images.
Keep one focal subject and verify that the concept remains readable near 120 pixels wide.
Review every result for truthful claims, identity accuracy, stray text, watermarks, and exact headline spelling.

避免

Do not imitate a reference thumbnail's identity or exact composition.
Do not request unsupported claims, invented statistics, false screenshots, or misleading outcomes.
Do not combine many subjects, props, labels, and effects into one crowded thumbnail.