技能 angular-developer

📦

angular-developer

Name: angular-developer
Author: angular

v1.0 內容修訂 r1 高風險 ⚙️ 外部命令⚡ 包含腳本🌐 網路存取📁 檔案系統存取

Build Modern Angular Applications

Angular projects require version-aware patterns across components, state, forms, routing, testing, and tooling. This skill applies focused Angular guidance and verifies generated work.

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "angular-developer" from https://skillstore.io/skills/angular-angular-developer.md and its manifest at https://skillstore.io/api/skills/angular-angular-developer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/angular-angular-developer.md 已簽名 manifest GET /api/skills/angular-angular-developer/manifest 已簽名 lockfile GET /api/skills/angular-angular-developer/lockfile

測試它

正在使用「angular-developer」。 Create a customer search feature with server results, loading feedback, and tests.

預期結果:

A standalone feature structure aligned with the current workspace.
Signal-based query and result state with typed HTTP access.
Loading, empty, error, and accessible interaction behavior.
Focused service, component, and routing test coverage.

正在使用「angular-developer」。 Review this Angular application before migrating from version 18.

預期結果:

A version and dependency compatibility assessment.
Prioritized migration stages with affected framework APIs.
Risks for forms, routing, rendering, and third-party libraries.
Verification steps for builds, tests, accessibility, and runtime behavior.

正在使用「angular-developer」。 Plan tests for a protected checkout route with async data.

預期結果:

Guard and resolver behavior scenarios.
Router harness coverage for allowed, denied, loading, and failed navigation.
Component checks for accessible status and error feedback.

安全審計

高風險

v1 • 2026/9/25 開啟版本化報告

Most static findings are lexical false positives from Markdown, CSS, Angular APIs, and fixed local imports. Six findings remain confirmed because the skill mandates local CLI execution or unpinned npx downloads. The MCP setup adds a high-confidence supply-chain risk by auto-running an unversioned package.

已掃描檔案

4,830

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

高

references/mcp.md:23 references/mcp.md:33-35

Unpinned MCP Package Execution

The MCP setup runs npx with automatic confirmation and no package version. A changed upstream package would execute with the host process permissions.

The documented command and configuration explicitly invoke unversioned @angular/cli through npx, while -y suppresses the normal installation confirmation.

能力複核項目 (6)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

中

SKILL.md:16

Ruby/shell backtick execution

3. Once you finish generating code, run `ng build` to ensure there are no build errors. If there are

The skill mandates running ng build in the current workspace. Angular builders can execute project-configured third-party code, so this is real command execution.

中

SKILL.md:30

Ruby/shell backtick execution

- **IF** the user requests a specific version (e.g., Angular 15), bypass local installations and str

The instruction explicitly requires npx for a requested Angular version. This downloads and executes package code outside the existing dependency lock.

中

SKILL.md:31

Ruby/shell backtick execution

- **Command:** `npx @angular/cli@<requested_version> new <project-name>`

This is an executable npx command containing user-selected version and project placeholders. It downloads package code and needs argument validation before execution.

中

SKILL.md:37

Ruby/shell backtick execution

- **Command:** `ng new <project-name>`

This instruction runs ng new with a user-derived project name and writes many files. Unsafe shell interpolation could turn an invalid name into command injection.

中

SKILL.md:41

Ruby/shell backtick execution

- **IF** no specific version is requested AND the `ng version` command fails (indicating no Angular

The fallback explicitly requires npx to fetch and execute a package when no local CLI exists. The package is not pinned to a reviewed version.

中

SKILL.md:42

Ruby/shell backtick execution

- **Command:** `npx @angular/cli@latest new <project-name>`

The command downloads and executes the latest Angular CLI package. Using a moving version without confirmation creates a supply-chain execution risk.

風險因素

⚙️ 外部命令 (50)

references/angular-animations.md:155-160 references/angular-aria.md:36-42 references/angular-aria.md:91-97 references/component-styling.md:17-22 references/components.md:15-16 references/components.md:20-27 references/components.md:46-49 references/creating-services.md:60-66 references/define-routes.md:49-52 references/define-routes.md:52-53 references/define-routes.md:53-54 references/define-routes.md:54-57 references/di-fundamentals.md:56-69 references/effects.md:32-41 references/host-elements.md:68-74 references/http-client.md:37-40 references/http-client.md:97-99 references/inputs.md:14-24 references/inputs.md:24-26 references/inputs.md:61-70 references/navigate-to-routes.md:19-24 references/outputs.md:14-27 references/pipes.md:19-25 references/resource.md:25-40 references/signals-overview.md:73-75 SKILL.md:16 SKILL.md:25 SKILL.md:30 SKILL.md:31 SKILL.md:35 SKILL.md:37 SKILL.md:41 SKILL.md:42 SKILL.md:54 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:69 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:90 SKILL.md:94 SKILL.md:110 SKILL.md:111 SKILL.md:112 SKILL.md:113 SKILL.md:132

⚡ 包含腳本 (9)

references/angular-aria.md:493 references/component-harnesses.md:38 references/component-harnesses.md:55 references/loading-strategies.md:27 references/loading-strategies.md:38 references/loading-strategies.md:42 references/loading-strategies.md:54 references/loading-strategies.md:55 references/signal-forms.md:509

🌐 網路存取 (13)

references/cli.md:51 references/defining-providers.md:22 references/defining-providers.md:40 references/environment-configuration.md:97 references/environment-configuration.md:34 references/environment-configuration.md:41 references/environment-configuration.md:75 references/http-client.md:37 references/http-client.md:44 references/http-client.md:84 references/resource.md:25 SKILL.md:54 SKILL.md:118

📁 檔案系統存取 (6)

references/data-resolvers.md:12 references/environment-configuration.md:48 references/mcp.md:57 references/mcp.md:57 references/navigate-to-routes.md:27 references/signal-forms.md:534

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/angular-angular-developer/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/angular-angular-developer/security.svg)](https://skillstore.io/skills/angular-angular-developer?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/angular-angular-developer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/angular-angular-developer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/angular-angular-developer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

angular. (2026). angular-developer security audit report (audit version 1) [Author version 1.0]. Skillstore. https://skillstore.io/skills/angular-angular-developer/audits/1

BibTeX 引用

@techreport{angular-angular-angular-developer-2026,
  author = {angular},
  title = {angular-developer security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/angular-angular-developer/audits/1},
  note = {Author version 1.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "angular-developer security audit report (audit version 1)"
version: "1.0"
type: report
authors:
  - name: "angular"
date-released: "2026-09-25"
url: "https://skillstore.io/skills/angular-angular-developer/audits/1"
identifiers:
  - type: other
    value: "skillstore:angular-angular-developer:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Implement a Product Feature

Create a maintainable Angular feature with components, state, forms, routing, data access, and focused tests.

Modernize an Angular Workspace

Review older patterns and plan version-compatible migrations toward signals, standalone APIs, and current naming conventions.

Strengthen Quality Coverage

Design accessible interactions and reliable unit, harness, router, and end-to-end tests for existing features.

試試這些提示

Create a Starter Application

Create an Angular application named [name] for [purpose]. Use my installed Angular version and include routing, styling, and one tested feature.

Build a Feature

Implement [feature] in this Angular workspace. Follow existing conventions and include components, typed data access, loading states, errors, and focused tests.

Modernize Existing Code

Review [area] for outdated Angular patterns. Propose a version-compatible migration to signals and standalone APIs, then implement changes with regression tests.

Design an Application Architecture

Design the architecture for [system]. Address routing, state ownership, dependency injection, SSR, accessibility, security boundaries, testing, and staged migration constraints.

最佳實務

Confirm the workspace Angular version before selecting APIs or migration steps.
Match existing architecture and naming conventions unless a migration is explicitly requested.
Verify generated changes with focused tests, a build, and relevant accessibility checks.

避免

Do not introduce recent Angular APIs into unsupported project versions.
Do not mix form strategies or state ownership patterns without a documented reason.
Do not treat successful compilation as proof of accessible, secure, or correct behavior.