技能 markstream-migration
📦
markstream-migration
内容修订 r1 安全 ⚙️ 外部命令
Migrate Markdown Rendering Safely
Replacing a Markdown renderer can break rendering, streaming, and HTML safety rules. This skill creates a migration plan that preserves behavior and documents remaining gaps.
支持: Claude Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "markstream-migration" from https://skillstore.io/skills/simon-he95-markstream-migration.md and its manifest at https://skillstore.io/api/skills/simon-he95-markstream-migration/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“markstream-migration”。 Audit a project that uses react-markdown with custom code blocks.
预期结果:
- Migration class: renderer-custom.
- Direct mapping: standard Markdown content.
- Review needed: custom code block rendering and raw HTML policy.
正在使用“markstream-migration”。 Review a Vue 3 chat that streams Markdown content.
预期结果:
- Use chat mode for the active chat row.
- Keep smooth streaming enabled when only output pacing is needed.
- Validate completed history with streaming disabled.
安全审计
安全v1 • 2026/7/19 打开版本化报告
All 20 external-command alerts are false positives caused by Markdown inline-code formatting in SKILL.md. The system-reconnaissance alert is also a false positive because it directs a security review of renderer behavior. No prompt injection, exfiltration intent, or executable command was found.
3
已扫描文件
96
分析行数
0
复核项
0
已忽略误报
风险因素
最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。
审计者: claude
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/simon-he95-markstream-migration/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/simon-he95-markstream-migration?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/simon-he95-markstream-migration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/simon-he95-markstream-migration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/simon-he95-markstream-migration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
simon-he95. (2026). markstream-migration security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/simon-he95-markstream-migration/audits/1BibTeX 引用
@techreport{simon-he95-simon-he95-markstream-migration-2026,
author = {simon-he95},
title = {markstream-migration security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/simon-he95-markstream-migration/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "markstream-migration security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "simon-he95"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/simon-he95-markstream-migration/audits/1"
identifiers:
- type: other
value: "skillstore:simon-he95-markstream-migration:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 41
架构
85
可维护性
87
内容
65
社区
83
规范符合性
你能构建什么
Replace a simple renderer
Identify a low-risk renderer swap and preserve existing user-visible Markdown behavior.
Migrate a customized chat UI
Review custom renderers and streaming settings before moving an AI chat interface to Markstream.
Assess complex Markdown pipelines
Document plugin, sanitization, and HTML gaps before deciding whether a migration is appropriate.
试试这些提示
Find the current renderer
Audit this repository for its current Markdown renderer. List every call site and classify the migration risk.
Plan a safe swap
Create a Markstream migration plan for the current Markdown renderer. Preserve styles and visible behavior first.
Review custom rendering
Map the custom Markdown renderers in this project to scoped Markstream component overrides. List any unsupported behavior.
Assess streaming and security
Review this chat Markdown migration for streaming, raw HTML, URL policy, and Mermaid risks. Recommend safe Markstream settings and validation steps.
最佳实践
- Audit call sites and security settings before replacing the renderer.
- Preserve current behavior before adding Markstream-specific features.
- Run the smallest relevant test or build after each migration stage.
避免
- Do not claim full parity before reviewing plugins and custom renderers.
- Do not enable trusted HTML globally to match one legacy call site.
- Do not move to nodes streaming when content streaming is sufficient.
常见问题
What does this skill audit?
It audits Markdown renderers, call sites, custom rendering, plugins, HTML handling, and streaming behavior.
Does it migrate code automatically?
It provides a migration workflow and recommendations. Code changes require a separate user request.
When is a migration direct?
A migration is direct when the application passes simple Markdown strings with little custom parser behavior.
How does it handle custom renderers?
It maps tag-based rendering to scoped Markstream component overrides and records behavior that needs manual work.
Does it review HTML safety?
Yes. It identifies raw HTML, URL policy, sanitization, and Mermaid settings that need application-specific review.
When should nodes streaming be used?
Use nodes only for AST control, worker preparsing, or frequent structural updates. Use content streaming for simpler pacing.
开发者详情
作者
simon-he95许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
aeb1814252a7125c8b732442bf1e7f2cd1f686c1
维护新鲜度
2026/7/19
使用量
0 次下载 · 0 次浏览
文件结构