技能 explainer-default

📦

explainer-default

Name: explainer-default
Author: barty-bart

內容修訂 r1 中風險 📁 檔案系統存取⚙️ 外部命令🌐 網路存取🔑 環境變數

Create Product Explainer Videos with Music

Software teams need clear product demonstrations without recording every interface interaction. This skill guides editable HTML animations and MP4 rendering with music and motion blur.

支援: Claude Codex Code(CC)

📊 69 尚可

Maintain this Skill? Claim it 📊 69 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "explainer-default" from https://skillstore.io/skills/barty-bart-explainer-default.md and its manifest at https://skillstore.io/api/skills/barty-bart-explainer-default/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/barty-bart-explainer-default.md 已簽名 manifest GET /api/skills/barty-bart-explainer-default/manifest 已簽名 lockfile GET /api/skills/barty-bart-explainer-default/lockfile

測試它

正在使用「explainer-default」。 Plan a 60-second demo for a task manager with capture, assignment, and progress tracking.

預期結果:

0-5 seconds: introduce the product name.
5-10 seconds: present the task coordination problem.
10-40 seconds: show capture, assignment, and progress tracking in three interface chapters.
40-57 seconds: summarize the workflow and show the supplied call to action.
57-60 seconds: hold the product name on the closing screen.

正在使用「explainer-default」。 Prepare review materials before exporting the final video.

預期結果:

Review package: editable HTML preview, contact sheet, and draft MP4.
Review notes: check text clipping, interface accuracy, camera framing, pacing, and audio balance.
Final package after approval: motion-blurred MP4 with audio and a separate silent copy.

安全審計

中風險

v1 • 2026/10/20 開啟版本化報告

Most static alerts are Markdown formatting, expected rendering operations, or audio serialization; no evidence of credential theft or prompt injection was found. Confirmed risks involve deleting existing frame directories and injecting entries through unescaped FFmpeg manifest paths. A separate semantic finding identifies unnecessary cross-file browser access when rendering untrusted HTML.

已掃描檔案

267

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

中

SKILL.md:154-160

Unnecessary Cross-File Browser Access

Chromium launches with --allow-file-access-from-files before loading the selected local HTML. Untrusted page scripts could read other local files and disclose accessible data.

The flag explicitly relaxes local-file origin restrictions, and no request filtering is configured. Exploitation requires untrusted rendered HTML; no malicious page is included.

能力複核項目 (2)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

中

SKILL.md:184

Synchronous file operations

for (let i = 0; i < times.length; i++) writeFileSync(`${dir}/${String(i).padStart(3, '0')}.jpg`, awa

Frames use a predictable output-derived directory that mkdirSync permits to exist. Recursive cleanup at line 188 deletes any unrelated contents already inside.

中

SKILL.md:214

Synchronous file operations

writeFileSync(list, segs.filter(Boolean).map(s => `file '${path.resolve(s)}'`).join('\n'));

Output-derived paths enter single-quoted concat entries without escaping quotes or newlines. Crafted filenames can inject manifest directives, while line 215 disables safe-path checks.

風險因素

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/barty-bart-explainer-default/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/barty-bart-explainer-default/security.svg)](https://skillstore.io/skills/barty-bart-explainer-default?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/barty-bart-explainer-default?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-explainer-default/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/barty-bart-explainer-default.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

barty-bart. (2026). explainer-default security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-explainer-default/audits/1

BibTeX 引用

@techreport{barty-bart-barty-bart-explainer-default-2026,
  author = {barty-bart},
  title = {explainer-default security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/barty-bart-explainer-default/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "explainer-default security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-explainer-default/audits/1"
identifiers:
  - type: other
    value: "skillstore:barty-bart-explainer-default:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Prepare a Product Launch

Turn an approved product brief into a one-minute launch demonstration with branded interface scenes and a closing call to action.

Explain a Feature Workflow

Show several interface steps with readable labels, cursor actions, and timed results without recording a live application.

Build Editable Motion Assets

Create a deterministic HTML animation, review contact sheets, and refine the draft before exporting a motion-blurred final video.

試試這些提示

Start a Simple Demo

Create a 60-second explainer for [product] using these facts: [facts]. Ask for missing essentials and use synthesized music.

Apply Brand Direction

Plan a 45-second portrait demo for [product]. Use [brand assets], show [three features], and end with this approved URL: [URL].

Review Before Final Rendering

Create a timed beat sheet, editable HTML, contact sheet, and draft for [product]. Wait for approval before the final render.

Refine a Detailed Workflow

Build a 90-second landscape demo from [approved brief]. Show [five workflow steps], use [music file], and flag placeholders before rendering.

最佳實務

Supply verified product facts, approved branding, and the exact workflow before scripting.
Review contact sheets and a draft before starting the slower final render.
Use trusted HTML and a dedicated output folder; address the documented renderer risks before processing external inputs.

避免

Inventing customer counts, testimonials, offers, or integration support.
Treating reconstructed interface scenes as proof of actual product behavior.
Rendering untrusted HTML or reusing output paths that contain existing files.

常見問題

Which AI tools are supported?

The skill provides instructions for Claude, Codex, and Claude Code. Rendering still requires the local dependencies.

What do I need to provide?

Provide the product name and description. A website, brand assets, feature list, and approved call to action improve accuracy.

What files can the workflow produce?

It can produce editable HTML, a contact sheet, draft MP4, final MP4 with audio, and a silent MP4.

Does it record my live application?

No. It rebuilds selected interface moments from product information and renders those animations.

Can I use my own music?

Yes. Supply a music file, or use the default synthesized soundtrack with interface sound effects.

Is the renderer suitable for untrusted files?

Not without hardening. It enables cross-file browser access, uses unescaped manifest paths, and recursively removes a predictable frame directory.

開發者詳細資訊

作者

barty-bart

授權

MIT

Skillstore 修訂

版本提示

作者未聲明版本。

儲存庫

https://github.com/barty-bart/motion-graphics/tree/3d83d987d658601d8a1269eb691622bdcd427335/skills/explainer-default

引用

feef9bda10fa496f1261820ba72add6a4b03b3c6

維護新鮮度

2026/10/20

使用量

0 次下載 · 0 次瀏覽

檔案結構

📄 README.md

📄 SKILL.md