技能 baoyu-markdown-to-html

📦

baoyu-markdown-to-html

内容修订 r1 高风险 ⚙️ 外部命令📁 文件系统访问⚡ 包含脚本🌐 网络访问🔑 环境变量

将 Markdown 转换为带样式的 HTML

将 Markdown 发布为兼容 WeChat 的 HTML 可能需要仔细处理格式和内联样式。此技能可将 Markdown 文件转换为带主题的 HTML，并支持图表、数学公式、提示框和代码高亮。

支持: Claude Codex Code(CC)

此技能属于一个技能包

一条命令安装完整技能包，获得任务所需的全部技能。

文档发布套件 · 3 技能安装完整技能包

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "baoyu-markdown-to-html" from https://skillstore.io/skills/jimliu-baoyu-markdown-to-html.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-markdown-to-html/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/jimliu-baoyu-markdown-to-html.md 已签名 manifest GET /api/skills/jimliu-baoyu-markdown-to-html/manifest 已签名 lockfile GET /api/skills/jimliu-baoyu-markdown-to-html/lockfile

测试它

正在使用“baoyu-markdown-to-html”。一篇包含 frontmatter、标题、代码块、提示框和本地图片的 Markdown 文章。

预期结果:

在 Markdown 文件旁边创建一篇 HTML 文章，包含主题样式和图片映射列表。

正在使用“baoyu-markdown-to-html”。一篇包含 Mermaid、PlantUML、数学公式和脚注的技术指南。

预期结果:

该指南会被渲染为带样式的 HTML，包含图表占位符、格式化公式、高亮代码和脚注部分。

正在使用“baoyu-markdown-to-html”。转换前已存在 article.html。

预期结果:

先使用时间戳备份之前的 HTML 文件，然后写入新的带主题 HTML 文件。

安全审计

高风险

v4 • 2026/7/5 打开版本化报告

Confirmed risks include external npx/Bun execution, broad local file reads and writes, remote resource fetching, remote dynamic imports, and unsafe HTML insertion surfaces. Most backtick, regex exec, SVG coordinate, CSS border, and JSFuck heuristic hits are false positives from normal TypeScript and markup. No evidence of prompt injection text was found in SKILL.md or the scanned scripts.

20

已扫描文件

3,739

分析行数

52

复核项

0

已忽略误报

已确认安全问题 (3)

高

scripts/md/render.ts:395-414 scripts/md/extensions/ruby.ts:91-120 scripts/md/extensions/slider.ts:57-60

Unsanitized Markdown HTML Output

Markdown-derived values are interpolated into HTML attributes and element bodies without consistent escaping. Malicious Markdown can produce active HTML when the output is opened or pasted into a privileged editor.

The renderer directly interpolates href, title, alt, ruby text, and slider captions into HTML strings. I did not find a sanitizer applied before the final HTML is written.

高

scripts/main.ts:80-89 scripts/main.ts:229-236

User-Controlled Remote Resource Fetching

Markdown image URLs beginning with http or https are downloaded during conversion. This can disclose network metadata or fetch attacker-controlled content when converting untrusted Markdown.

The code explicitly branches on http and https image paths, downloads them, and reports local mappings. The URL originates from Markdown image syntax collected earlier in the conversion.

高

scripts/md/render.ts:349-353 scripts/md/utils/languages.ts:80-112 scripts/md/utils/languages.ts:191-205

Remote Dynamic Import from Markdown Language Names

Unknown code block languages can be carried into a pending language attribute and later used to build a CDN import URL. This can load remote JavaScript based on document content.

The renderer stores an unregistered language name in HTML attributes, and the utility later imports grammarUrlFor(language). The exact caller path is browser-dependent, so confidence is high but not absolute.

能力复核项 (52)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

scripts/main.ts:9

Node.js child_process module

import { spawnSync } from 'node:child_process';

The file imports node:child_process and the module is used later to invoke npx. This is real external command capability in the skill runtime.

高

scripts/main.ts:203

Synchronous spawn

const result = spawnSync('npx', args, {

spawnSync executes npx with Bun to run the renderer. The arguments are mostly controlled, but it still executes an external toolchain from the skill.

高

scripts/md/extensions/plantuml.ts:170

outerHTML assignment (XSS risk)

placeholderElement.outerHTML = createPlantUMLHTML(imageUrl, options, svgContent)

PlantUML inline rendering replaces an element with HTML built from fetched SVG content. Embedding remote SVG through outerHTML is a real injection surface.

高

scripts/md/utils/languages.ts:112

Dynamic import() expression

const module = await import(/* @vite-ignore */ grammarUrlFor(language))

The language highlighter dynamically imports a module URL built from a language name. If the language comes from Markdown, this can load remote code from the configured CDN.

中

scripts/main.ts:42

Node.js fs operations

fs.unlinkSync(destPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:50

Node.js fs operations

fs.unlinkSync(destPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:64

Node.js fs operations

fs.unlink(destPath, () => {});

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:123

Node.js fs operations

const content = fs.readFileSync(markdownPath, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:224

Node.js fs operations

fs.renameSync(finalHtmlPath, backupPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:227

Node.js fs operations

fs.copyFileSync(tempHtmlPath, finalHtmlPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:239

Node.js fs operations

let htmlContent = fs.readFileSync(finalHtmlPath, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:244

Node.js fs operations

fs.writeFileSync(finalHtmlPath, htmlContent, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/main.ts:123

Synchronous file operations

const content = fs.readFileSync(markdownPath, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/main.ts:239

Synchronous file operations

let htmlContent = fs.readFileSync(finalHtmlPath, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/main.ts:244

Synchronous file operations

fs.writeFileSync(finalHtmlPath, htmlContent, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/main.ts:35

File stream creation

const file = fs.createWriteStream(destPath);

The code creates a writable file stream for downloaded image content. This is real file creation based on conversion inputs.

中

scripts/main.ts:190

Temp directory access

const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'markdown-to-html-'));

The converter creates a temporary directory under the OS temp path and stores intermediate Markdown and assets there. Sensitive input could remain outside the project directory.

中

scripts/md/extensions/infographic.ts:77

innerHTML assignment (XSS risk)

container.innerHTML = `<div style="color: red; padding: 10px; border: 1px solid red;">Infographic 渲染

The catch block writes an error message into innerHTML. Error text may include untrusted content, so this is a plausible DOM injection risk.

中

scripts/md/extensions/plantuml.ts:193

Fetch API call

const response = await fetch(svgUrl)

fetch retrieves PlantUML SVG content from the generated diagram URL. This is real outbound network access during inline diagram rendering.

中

scripts/md/extensions/plantuml.ts:241

Hardcoded URL

serverUrl: options.serverUrl || `https://www.plantuml.com/plantuml`,

This is the default PlantUML server used for diagram rendering. Markdown diagrams can cause requests to this external service.

中

scripts/md/render.ts:81

Node.js fs operations

const content = fs.readFileSync(configPath, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:677

Node.js fs operations

baseCss: fs.readFileSync(basePath, "utf-8"),

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:678

Node.js fs operations

themeCss: fs.readFileSync(themePath, "utf-8"),

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:829

Node.js fs operations

const markdown = fs.readFileSync(inputPath, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:865

Node.js fs operations

fs.renameSync(outputPath, backupPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:868

Node.js fs operations

fs.writeFileSync(outputPath, finalHtml, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

中

scripts/md/render.ts:81

Synchronous file operations

const content = fs.readFileSync(configPath, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/render.ts:677

Synchronous file operations

baseCss: fs.readFileSync(basePath, "utf-8"),

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/render.ts:678

Synchronous file operations

themeCss: fs.readFileSync(themePath, "utf-8"),

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/render.ts:829

Synchronous file operations

const markdown = fs.readFileSync(inputPath, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/render.ts:868

Synchronous file operations

fs.writeFileSync(outputPath, finalHtml, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

中

scripts/md/utils/languages.ts:202

innerHTML assignment (XSS risk)

codeBlock.innerHTML = highlighted

The highlighter writes generated HTML into a code element with innerHTML. highlight.js usually escapes code, but this remains a DOM insertion sink.

中

scripts/md/utils/languages.ts:80

Hardcoded URL

const HLJS_CDN_BASE = `https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/${HLJS_VERSION

This URL is the CDN base used by dynamic language loading. It can be contacted when loading additional highlight.js grammars.

中

Hidden file access

test -f "$HOME/.baoyu-skills/baoyu-markdown-to-html/EXTEND.md" && echo "user"

SKILL.md instructs the agent to check a hidden .baoyu-skills EXTEND.md path, including a user-home location. This is intentional configuration access but reaches hidden files.

中

Hidden file access

│ $HOME/.baoyu-skills/baoyu-markdown-to-html/EXTEND.md │ User home │

SKILL.md instructs the agent to check a hidden .baoyu-skills EXTEND.md path, including a user-home location. This is intentional configuration access but reaches hidden files.

低

scripts/main.ts:86

Node.js fs stat operations

if (!fs.existsSync(localPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/main.ts:214

Node.js fs stat operations

if (!fs.existsSync(tempHtmlPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/main.ts:221

Node.js fs stat operations

if (fs.existsSync(finalHtmlPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/main.ts:321

Node.js fs stat operations

if (!fs.existsSync(markdownPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/main.ts:190

Temp file creation

const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'markdown-to-html-'));

The same temp directory is used for generated intermediate files. This is expected but can leave temporary copies of source content.

低

scripts/md/render.ts:67

Node.js fs stat operations

if (!fs.existsSync(dir)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:78

Node.js fs stat operations

if (!fs.existsSync(configPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:101

Node.js fs stat operations

fs.existsSync(path.join(THEME_DIR, `${name}.css`))

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:102

Node.js fs stat operations

|| fs.existsSync(path.join(EXTERNAL_THEME_DIR, `${name}.css`))

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:658

Node.js fs stat operations

fs.existsSync(candidate)

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:661

Node.js fs stat operations

fs.existsSync(candidate)

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:817

Node.js fs stat operations

if (!fs.existsSync(inputPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:863

Node.js fs stat operations

if (fs.existsSync(outputPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

低

scripts/md/render.ts:36

Environment variable access (dot notation)

process.env.MD_THEME_CONFIG_PATH

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

低

scripts/md/render.ts:39

Environment variable access (dot notation)

process.env.MD_THEME_DIR

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

低

scripts/md/render.ts:36

Environment variable object

process.env.MD_THEME_CONFIG_PATH

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

低

scripts/md/render.ts:39

Environment variable object

process.env.MD_THEME_DIR

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

风险因素

⚙️ 外部命令 (366)

scripts/main.ts:9 scripts/main.ts:203 scripts/main.ts:29 scripts/main.ts:51 scripts/main.ts:84 scripts/main.ts:87 scripts/main.ts:170 scripts/main.ts:183-188 scripts/main.ts:188 scripts/main.ts:198-210 scripts/main.ts:210-215 scripts/main.ts:215-222 scripts/main.ts:222-223 scripts/main.ts:223-241 scripts/main.ts:241-246 scripts/main.ts:246-259 scripts/main.ts:288-322 scripts/main.ts:322-331 scripts/md/extensions/alert.ts:116 scripts/md/extensions/alert.ts:26 scripts/md/extensions/alert.ts:36 scripts/md/extensions/alert.ts:47 scripts/md/extensions/alert.ts:48 scripts/md/extensions/alert.ts:52 scripts/md/extensions/alert.ts:53 scripts/md/extensions/alert.ts:57 scripts/md/extensions/alert.ts:59 scripts/md/extensions/alert.ts:66 scripts/md/extensions/alert.ts:70 scripts/md/extensions/alert.ts:75 scripts/md/extensions/alert.ts:78 scripts/md/extensions/alert.ts:83-89 scripts/md/extensions/alert.ts:89-90 scripts/md/extensions/alert.ts:90-93 scripts/md/extensions/alert.ts:93-104 scripts/md/extensions/alert.ts:104-105 scripts/md/extensions/alert.ts:105-109 scripts/md/extensions/alert.ts:109-110 scripts/md/extensions/alert.ts:110-125 scripts/md/extensions/alert.ts:125-144 scripts/md/extensions/alert.ts:144-145 scripts/md/extensions/alert.ts:145-148 scripts/md/extensions/alert.ts:148-149 scripts/md/extensions/alert.ts:149-152 scripts/md/extensions/alert.ts:152-153 scripts/md/extensions/alert.ts:153-156 scripts/md/extensions/alert.ts:156-157 scripts/md/extensions/alert.ts:157-160 scripts/md/extensions/alert.ts:160-161 scripts/md/extensions/alert.ts:161-164 scripts/md/extensions/alert.ts:164-165 scripts/md/extensions/alert.ts:165-169 scripts/md/extensions/alert.ts:169-170 scripts/md/extensions/alert.ts:170-171 scripts/md/extensions/alert.ts:171-174 scripts/md/extensions/alert.ts:174-175 scripts/md/extensions/alert.ts:175-176 scripts/md/extensions/alert.ts:176-179 scripts/md/extensions/alert.ts:179-180 scripts/md/extensions/alert.ts:180-181 scripts/md/extensions/alert.ts:181-184 scripts/md/extensions/alert.ts:184-185 scripts/md/extensions/alert.ts:185-186 scripts/md/extensions/alert.ts:186-189 scripts/md/extensions/alert.ts:189-190 scripts/md/extensions/alert.ts:190-191 scripts/md/extensions/alert.ts:191-194 scripts/md/extensions/alert.ts:194-195 scripts/md/extensions/alert.ts:195-196 scripts/md/extensions/alert.ts:196-199 scripts/md/extensions/alert.ts:199-200 scripts/md/extensions/alert.ts:200-201 scripts/md/extensions/alert.ts:201-204 scripts/md/extensions/alert.ts:204-205 scripts/md/extensions/alert.ts:205-206 scripts/md/extensions/alert.ts:206-209 scripts/md/extensions/alert.ts:209-210 scripts/md/extensions/alert.ts:210-211 scripts/md/extensions/alert.ts:211-214 scripts/md/extensions/alert.ts:214-215 scripts/md/extensions/alert.ts:215-216 scripts/md/extensions/alert.ts:216-219 scripts/md/extensions/alert.ts:219-220 scripts/md/extensions/alert.ts:220-221 scripts/md/extensions/alert.ts:221-224 scripts/md/extensions/alert.ts:224-225 scripts/md/extensions/alert.ts:225-226 scripts/md/extensions/alert.ts:226-229 scripts/md/extensions/alert.ts:229-230 scripts/md/extensions/alert.ts:230-231 scripts/md/extensions/alert.ts:231-234 scripts/md/extensions/alert.ts:234-235 scripts/md/extensions/alert.ts:235-236 scripts/md/extensions/alert.ts:236-239 scripts/md/extensions/alert.ts:239-240 scripts/md/extensions/alert.ts:240-241 scripts/md/extensions/alert.ts:241-244 scripts/md/extensions/alert.ts:244-245 scripts/md/extensions/alert.ts:245-246 scripts/md/extensions/alert.ts:246-249 scripts/md/extensions/alert.ts:249-250 scripts/md/extensions/alert.ts:250-251 scripts/md/extensions/alert.ts:251-254 scripts/md/extensions/alert.ts:254-255 scripts/md/extensions/alert.ts:255-256 scripts/md/extensions/alert.ts:256-283 scripts/md/extensions/footnotes.ts:21 scripts/md/extensions/footnotes.ts:22 scripts/md/extensions/footnotes.ts:34 scripts/md/extensions/footnotes.ts:45-49 scripts/md/extensions/footnotes.ts:51-52 scripts/md/extensions/footnotes.ts:55 scripts/md/extensions/footnotes.ts:61 scripts/md/extensions/footnotes.ts:62 scripts/md/extensions/footnotes.ts:72 scripts/md/extensions/footnotes.ts:82-84 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/infographic.ts:32 scripts/md/extensions/infographic.ts:34 scripts/md/extensions/infographic.ts:77 scripts/md/extensions/infographic.ts:91-94 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/infographic.ts:104-109 scripts/md/extensions/katex.ts:23 scripts/md/extensions/katex.ts:24 scripts/md/extensions/katex.ts:28 scripts/md/extensions/katex.ts:31 scripts/md/extensions/katex.ts:32 scripts/md/extensions/katex.ts:33 scripts/md/extensions/katex.ts:39 scripts/md/extensions/katex.ts:42 scripts/md/extensions/katex.ts:50 scripts/md/extensions/katex.ts:51 scripts/md/extensions/katex.ts:57 scripts/md/extensions/katex.ts:61 scripts/md/extensions/katex.ts:70-77 scripts/md/extensions/katex.ts:77-90 scripts/md/extensions/katex.ts:90-91 scripts/md/extensions/katex.ts:91-96 scripts/md/extensions/katex.ts:96-109 scripts/md/extensions/katex.ts:109-110 scripts/md/extensions/katex.ts:110-112 scripts/md/extensions/katex.ts:112-119 scripts/md/extensions/katex.ts:119-132 scripts/md/extensions/katex.ts:132-133 scripts/md/extensions/katex.ts:133-135 scripts/md/extensions/katex.ts:135-142 scripts/md/extensions/markup.ts:21 scripts/md/extensions/markup.ts:45 scripts/md/extensions/markup.ts:71 scripts/md/extensions/markup.ts:14 scripts/md/extensions/markup.ts:15 scripts/md/extensions/markup.ts:24 scripts/md/extensions/markup.ts:32 scripts/md/extensions/markup.ts:38 scripts/md/extensions/markup.ts:39 scripts/md/extensions/markup.ts:48 scripts/md/extensions/markup.ts:56 scripts/md/extensions/markup.ts:62 scripts/md/extensions/markup.ts:63 scripts/md/extensions/markup.ts:74 scripts/md/extensions/markup.ts:82 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/plantuml.ts:14 scripts/md/extensions/plantuml.ts:51 scripts/md/extensions/plantuml.ts:54 scripts/md/extensions/plantuml.ts:56 scripts/md/extensions/plantuml.ts:68-81 scripts/md/extensions/plantuml.ts:81-112 scripts/md/extensions/plantuml.ts:112-132 scripts/md/extensions/plantuml.ts:132-135 scripts/md/extensions/plantuml.ts:135 scripts/md/extensions/plantuml.ts:144 scripts/md/extensions/plantuml.ts:145 scripts/md/extensions/plantuml.ts:155 scripts/md/extensions/plantuml.ts:156 scripts/md/extensions/plantuml.ts:162 scripts/md/extensions/plantuml.ts:164 scripts/md/extensions/plantuml.ts:168 scripts/md/extensions/plantuml.ts:176 scripts/md/extensions/plantuml.ts:177 scripts/md/extensions/plantuml.ts:178-180 scripts/md/extensions/plantuml.ts:182-195 scripts/md/extensions/plantuml.ts:195-201 scripts/md/extensions/plantuml.ts:201-202 scripts/md/extensions/plantuml.ts:202-204 scripts/md/extensions/plantuml.ts:204-205 scripts/md/extensions/plantuml.ts:205-208 scripts/md/extensions/plantuml.ts:208-209 scripts/md/extensions/plantuml.ts:209-219 scripts/md/extensions/plantuml.ts:219 scripts/md/extensions/plantuml.ts:220-221 scripts/md/extensions/plantuml.ts:221-225 scripts/md/extensions/plantuml.ts:227-231 scripts/md/extensions/plantuml.ts:233-241 scripts/md/extensions/plantuml.ts:241-242 scripts/md/extensions/plantuml.ts:242-243 scripts/md/extensions/plantuml.ts:243-247 scripts/md/extensions/plantuml.ts:247-248 scripts/md/extensions/plantuml.ts:248-249 scripts/md/extensions/plantuml.ts:249-258 scripts/md/extensions/plantuml.ts:258-259 scripts/md/extensions/plantuml.ts:259-261 scripts/md/extensions/plantuml.ts:261-262 scripts/md/extensions/plantuml.ts:262-266 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/plantuml.ts:271-284 scripts/md/extensions/plantuml.ts:284 scripts/md/extensions/ruby.ts:31 scripts/md/extensions/ruby.ts:44 scripts/md/extensions/ruby.ts:13 scripts/md/extensions/ruby.ts:14 scripts/md/extensions/ruby.ts:15 scripts/md/extensions/ruby.ts:16 scripts/md/extensions/ruby.ts:22 scripts/md/extensions/ruby.ts:23 scripts/md/extensions/ruby.ts:34 scripts/md/extensions/ruby.ts:38 scripts/md/extensions/ruby.ts:47 scripts/md/extensions/ruby.ts:51 scripts/md/extensions/ruby.ts:66-68 scripts/md/extensions/ruby.ts:68-89 scripts/md/extensions/ruby.ts:89-91 scripts/md/extensions/ruby.ts:91-98 scripts/md/extensions/ruby.ts:98-106 scripts/md/extensions/ruby.ts:106-109 scripts/md/extensions/ruby.ts:109-117 scripts/md/extensions/ruby.ts:117-120 scripts/md/extensions/slider.ts:11 scripts/md/extensions/slider.ts:12 scripts/md/extensions/slider.ts:21 scripts/md/extensions/slider.ts:33-39 scripts/md/extensions/slider.ts:39-40 scripts/md/extensions/slider.ts:40-49 scripts/md/extensions/slider.ts:57-60 scripts/md/extensions/slider.ts:60-68 scripts/md/extensions/toc.ts:34 scripts/md/extensions/toc.ts:17 scripts/md/extensions/toc.ts:18-26 scripts/md/extensions/toc.ts:26-27 scripts/md/extensions/toc.ts:27-37 scripts/md/extensions/toc.ts:37-44 scripts/md/extensions/toc.ts:44-45 scripts/md/extensions/toc.ts:45-50 scripts/md/extensions/toc.ts:50-55 scripts/md/extensions/toc.ts:55-58 scripts/md/extensions/toc.ts:58-63 scripts/md/extensions/toc.ts:63-66 scripts/md/render.ts:101 scripts/md/render.ts:102 scripts/md/render.ts:151-155 scripts/md/render.ts:170-177 scripts/md/render.ts:177-178 scripts/md/render.ts:178-196 scripts/md/render.ts:202-241 scripts/md/render.ts:241-243 scripts/md/render.ts:243-279 scripts/md/render.ts:283-300 scripts/md/render.ts:300-334 scripts/md/render.ts:334-347 scripts/md/render.ts:347-351 scripts/md/render.ts:351-353 scripts/md/render.ts:353-355 scripts/md/render.ts:355-381 scripts/md/render.ts:381-392 scripts/md/render.ts:392-398 scripts/md/render.ts:398-399 scripts/md/render.ts:399-405 scripts/md/render.ts:405-412 scripts/md/render.ts:412-414 scripts/md/render.ts:414-438 scripts/md/render.ts:445-496 scripts/md/render.ts:496-533 scripts/md/render.ts:533-542 scripts/md/render.ts:542-572 scripts/md/render.ts:572-576 scripts/md/render.ts:576-615 scripts/md/render.ts:621-622 scripts/md/render.ts:628-634 scripts/md/render.ts:636-654 scripts/md/render.ts:654-655 scripts/md/render.ts:655-666 scripts/md/render.ts:666-672 scripts/md/render.ts:672-683 scripts/md/render.ts:702-724 scripts/md/render.ts:724-727 scripts/md/render.ts:727-730 scripts/md/render.ts:730-733 scripts/md/render.ts:733-756 scripts/md/render.ts:756-780 scripts/md/render.ts:780-784 scripts/md/render.ts:784-788 scripts/md/render.ts:788-818 scripts/md/render.ts:818-864 scripts/md/render.ts:864-871 scripts/md/render.ts:871-873 scripts/md/utils/languages.ts:79 scripts/md/utils/languages.ts:80 scripts/md/utils/languages.ts:89 scripts/md/utils/languages.ts:116 scripts/md/utils/languages.ts:134 scripts/md/utils/languages.ts:135 scripts/md/utils/languages.ts:137 scripts/md/utils/languages.ts:141 scripts/md/utils/languages.ts:145 scripts/md/utils/languages.ts:160-163 scripts/md/utils/languages.ts:163 scripts/md/utils/languages.ts:168 scripts/md/utils/languages.ts:171 scripts/md/utils/languages.ts:172-173 scripts/md/utils/languages.ts:173-174 scripts/md/utils/languages.ts:174-176 scripts/md/utils/languages.ts:181-192 scripts/md/utils/languages.ts:192-193 scripts/md/utils/languages.ts:193 scripts/md/utils/languages.ts:198-203 scripts/md/utils/languages.ts:203-204 scripts/md/utils/languages.ts:204-205 scripts/md/utils/languages.ts:205-215 scripts/md/utils/languages.ts:215-218 scripts/md/utils/languages.ts:218-232 scripts/md/utils/languages.ts:232-233 scripts/md/utils/languages.ts:233-234 SKILL.md:12 SKILL.md:16 SKILL.md:22-28 SKILL.md:28-61 SKILL.md:61-63 SKILL.md:63-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-78 SKILL.md:78-79 SKILL.md:79-83 SKILL.md:83-85 SKILL.md:85-93 SKILL.md:93-95 SKILL.md:95-101 SKILL.md:101-102 SKILL.md:102-103 SKILL.md:103-104 SKILL.md:104-108 SKILL.md:108-120 SKILL.md:120-125 SKILL.md:125-126 SKILL.md:126-129 SKILL.md:129-133 SKILL.md:133-148 SKILL.md:148-154 SKILL.md:154-155 SKILL.md:155-156 SKILL.md:156-162 SKILL.md:162 SKILL.md:163 SKILL.md:164 SKILL.md:165 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170 SKILL.md:171 SKILL.md:172-173 SKILL.md:173-174 SKILL.md:174 SKILL.md:175 SKILL.md:181-187

📁 文件系统访问 (46)

scripts/main.ts:42 scripts/main.ts:50 scripts/main.ts:64 scripts/main.ts:123 scripts/main.ts:224 scripts/main.ts:227 scripts/main.ts:239 scripts/main.ts:244 scripts/main.ts:86 scripts/main.ts:214 scripts/main.ts:221 scripts/main.ts:321 scripts/main.ts:123 scripts/main.ts:239 scripts/main.ts:244 scripts/main.ts:35 scripts/main.ts:164 scripts/main.ts:190 scripts/main.ts:190 scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:81 scripts/md/render.ts:677 scripts/md/render.ts:678 scripts/md/render.ts:829 scripts/md/render.ts:865 scripts/md/render.ts:868 scripts/md/render.ts:67 scripts/md/render.ts:78 scripts/md/render.ts:101 scripts/md/render.ts:102 scripts/md/render.ts:658 scripts/md/render.ts:661 scripts/md/render.ts:817 scripts/md/render.ts:863 scripts/md/render.ts:81 scripts/md/render.ts:677 scripts/md/render.ts:678 scripts/md/render.ts:829 scripts/md/render.ts:868 scripts/md/render.ts:242 scripts/md/render.ts:404 SKILL.md:27 SKILL.md:35

⚡ 包含脚本 (16)

scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:12 scripts/md/extensions/infographic.ts:77 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/markup.ts:21 scripts/md/extensions/markup.ts:45 scripts/md/extensions/markup.ts:71 scripts/md/extensions/plantuml.ts:170 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/ruby.ts:31 scripts/md/extensions/ruby.ts:44 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:329 scripts/md/render.ts:747 scripts/md/utils/languages.ts:112 scripts/md/utils/languages.ts:202

🌐 网络访问 (32)

scripts/md/extensions/alert.ts:21 scripts/md/extensions/alert.ts:23 scripts/md/extensions/alert.ts:153 scripts/md/extensions/alert.ts:157 scripts/md/extensions/alert.ts:165 scripts/md/extensions/alert.ts:171 scripts/md/extensions/alert.ts:176 scripts/md/extensions/alert.ts:181 scripts/md/extensions/alert.ts:186 scripts/md/extensions/alert.ts:191 scripts/md/extensions/alert.ts:196 scripts/md/extensions/alert.ts:201 scripts/md/extensions/alert.ts:206 scripts/md/extensions/alert.ts:211 scripts/md/extensions/alert.ts:216 scripts/md/extensions/alert.ts:221 scripts/md/extensions/alert.ts:226 scripts/md/extensions/alert.ts:231 scripts/md/extensions/alert.ts:236 scripts/md/extensions/alert.ts:241 scripts/md/extensions/alert.ts:251 scripts/md/extensions/alert.ts:256 scripts/md/extensions/katex.ts:26 scripts/md/extensions/plantuml.ts:193 scripts/md/extensions/plantuml.ts:7 scripts/md/extensions/plantuml.ts:35 scripts/md/extensions/plantuml.ts:61 scripts/md/extensions/plantuml.ts:78 scripts/md/extensions/plantuml.ts:241 scripts/md/extensions/ruby.ts:5 scripts/md/LICENSE:3 scripts/md/utils/languages.ts:80

🔑 环境变量 (4)

scripts/md/render.ts:36 scripts/md/render.ts:39 scripts/md/render.ts:36 scripts/md/render.ts:39

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

安全评估

复制报告链接

https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/jimliu-baoyu-markdown-to-html/security.svg)](https://skillstore.io/skills/jimliu-baoyu-markdown-to-html?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/jimliu-baoyu-markdown-to-html?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-markdown-to-html/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-markdown-to-html.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

jimliu. (2026). baoyu-markdown-to-html security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4

BibTeX 引用

@techreport{jimliu-jimliu-baoyu-markdown-to-html-2026,
  author = {jimliu},
  title = {baoyu-markdown-to-html security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-markdown-to-html security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "jimliu"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4"
identifiers:
  - type: other
    value: "skillstore:jimliu-baoyu-markdown-to-html:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 高

45

架构

85

可维护性

85

内容

70

社区

83

规范符合性

你能构建什么

准备 WeChat 文章

将完成的 Markdown 文章转换为带样式的 HTML，适合粘贴到发布流程中。

发布技术指南

以一致的 HTML 样式渲染代码块、图表、提示框和数学公式，用于开发者教育。

格式化文档草稿

将包含 frontmatter 和图片的 Markdown 草稿转换为可审阅的 HTML 交付物。

试试这些提示

转换单个文件

Convert article.md to styled HTML with the default theme. Report the output path and any backup path.

使用主题

Convert draft.md with the grace theme. Keep the first heading in the rendered content.

准备发布草稿

Convert post.md to HTML, use the title from frontmatter, and list any image mappings I must review.

渲染技术文章

Convert guide.md with diagrams, math, alerts, and code blocks. Use the simple theme and preserve existing output backups.

最佳实践

转换前先审查来自不受信任来源的 Markdown。
在不需要网络访问时使用本地图片。
在转换前选择主题，以避免反复更改输出。

避免

在未审查临时文件的情况下，不要在共享机器上转换机密或私有 Markdown。
不要将由不受信任 Markdown 生成的 HTML 粘贴到高权限网页中。
不要依赖远程图表或图片进行离线发布。

常见问题

这个技能会生成什么？

它会根据 Markdown 输入文件生成一个带样式的 HTML 文件。

哪些工具可以使用它？

报告列出了 Claude、Codex 和 Claude Code 作为支持的工具。

包含哪些主题？

该技能文档说明了 default、grace 和 simple 主题。

它支持图表吗？

支持。它包含对 Mermaid 和 PlantUML 图表块的支持。

HTML 保存在哪里？

HTML 文件会保存在 Markdown 输入文件所在的同一目录中。

它对不受信任的 Markdown 安全吗？

不安全。使用来自不受信任 Markdown 的输出前，需要进行额外的清理处理。

开发者详情

作者

许可证

MIT

Skillstore 修订

r1

版本提示

作者未声明版本。

仓库

https://github.com/jimliu/baoyu-skills/tree/main/skills/baoyu-markdown-to-html/

引用

a25199bc7d6b82598536822d1738eb5d5f54025b

维护新鲜度

2026/7/18

使用量

14 次下载 · 221 次浏览

文件结构

📁 md/

📁 extensions/

📄 footnotes.ts

📄 infographic.ts

📄 plantuml.ts

📄 default.css

📄 simple.css

📄 languages.ts

📄 package.json

jimliu 的更多技能

baoyu-comic

从源材料创建知识漫画

冗长的源材料很难转化为清晰的视觉课程。此技能会引导 Claude、Codex 或 Claude Code 完成分析、分镜设计、图像提示词和 PDF 组装。

设计与创意查看

baoyu-format-markdown

格式化 Markdown 文章

草稿通常缺少一致的结构、frontmatter 和易读的排版。此技能可将纯文本或粗略的 Markdown 转换为组织良好、可供审阅的 Markdown。

baoyu-article-illustrator

用一致的视觉元素为文章配图

长文章通常需要视觉元素，但选择图片位置和编写提示词很耗时。此技能会分析 Markdown 内容，规划插图，并创建一致的提示词和图片放置位置。

设计与创意查看

baoyu-cover-image

创建文章封面图

文章封面通常需要在开始图像生成前先明确视觉概念。此技能会分析内容，并创建与风格匹配的封面提示词，包含标题和布局指导。

设计与创意查看

release-skills

安全发布 Baoyu Skills

手动发布可能会遗漏 changelog、version 和 tag 步骤。此技能为 baoyu-skills 提供可重复的发布工作流，支持双语 changelog 和本地 git tagging。

DevOps 与基础设施查看

baoyu-infographic

从结构化内容创建信息图

将笔记或报告转化为清晰的视觉内容可能需要做出许多设计决策。此技能会分析内容、推荐布局和风格，并为 Claude、Codex 或 Claude Code 工作流准备图像提示词。

设计与创意查看

mermaid-diagrams

为软件文档创建 Mermaid 图表

由 softaworks

团队通常需要清晰的图表，并且这些图表应与代码和文档保持紧密关联。此技能将指导 Claude、Codex 和 Claude Code 使用 Mermaid 语法创建可维护的可视化模型。

markdown-pro

创建专业的 Markdown 文档

由 AutumnsGrove

团队需要清晰的项目文档，并在 README 文件、changelog 和贡献指南之间保持一致。Markdown Pro 提供模板、结构和辅助工作流，用于制作精致的技术文档。

c4-architecture

创建 C4 架构图

由 softaworks

架构文档常常会变得不清晰，或对目标受众来说过于详细。此技能可为系统上下文、容器、组件、部署和流程创建聚焦的 C4 Mermaid 图。

docs-write

编写 Metabase 文档

由 metabase

产品文档常常会变得过于正式、含糊，或难以快速浏览。此技能可帮助 Claude、Codex 和 Claude Code 编写 Metabase 风格的文档，使其清晰、直接，并以读者为中心。

doc-writer

创建结构化任务文档

由 0xhiroki

当计划、需求和验证步骤分散时，团队往往会丢失任务上下文。此技能会根据仓库上下文和模板创建一致的任务文档。

mermaid-expert

创建清晰的 Mermaid 图表

由 sickn33

当图表不一致或无效时，复杂流程很难解释清楚。此技能帮助 Claude、Codex 和 Claude Code 创建易读的 Mermaid 文档。