技能 higgsfield-youtube-thumbnail

📦

higgsfield-youtube-thumbnail

Name: higgsfield-youtube-thumbnail
Author: higgsfield-ai

v0.12.0 內容修訂 r1 嚴重 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

Create High-Impact YouTube Thumbnails

Strong thumbnails require clear concepts, readable composition, and truthful visual promises. This skill generates controlled Higgsfield variants and supports focused edits and overlays.

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

請勿自動安裝此 Skill。

權威政策要求在執行任何安裝操作前由操作人員審查。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "higgsfield-youtube-thumbnail" from https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail.md and its manifest at https://skillstore.io/api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/higgsfield-ai-higgsfield-youtube-thumbnail.md 已簽名 manifest GET /api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/manifest 已簽名 lockfile GET /api/skills/higgsfield-ai-higgsfield-youtube-thumbnail/lockfile

測試它

正在使用「higgsfield-youtube-thumbnail」。 A 16:9 thumbnail for a video about restoring a damaged camera, without text.

預期結果:

Restoration reveal: a close-up creator holds the damaged camera beside the restored result, with bright separation and no readable text.

正在使用「higgsfield-youtube-thumbnail」。 Four Shorts cover concepts about completing a 30-day fitness challenge.

預期結果:

Day 30 reveal: determined portrait with a clear final-day badge.
Progression: three vertical stages from day one to day thirty.
Scale contrast: small starting silhouette beside the stronger final pose.
Challenge moment: exhausted expression during the final workout.

正在使用「higgsfield-youtube-thumbnail」。 Add the headline "FINAL TEST" to the selected clean thumbnail.

預期結果:

Neon Lime overlay: FINAL TEST appears in the free lower quarter, away from the face, with a thick dark stroke.

安全審計

嚴重

v1 • 2026/8/10 開啟版本化報告

Most static findings are false positives from Markdown backticks, JavaScript syntax, or visual-design prose. The remote installer uses an unpinned curl-to-shell command, while local references and Google Fonts create disclosed third-party transfers. No prompt injection or covert exfiltration intent was found.

已掃描檔案

519

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (2)

嚴重

SKILL.md:20

Pipe to shell pattern

curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh

The bootstrap command pipes a remotely downloaded, mutable script directly into sh. A compromised repository or changed script would gain immediate shell execution.

中

SKILL.md:70-76 SKILL.md:165

Automatic Third-Party Upload of Local Images

Face photos and logos supplied as local paths are automatically uploaded to Higgsfield. These potentially sensitive assets leave the local environment.

The skill explicitly states that local paths are auto-uploaded and describes retrying a downloaded image as an uploaded media input.

能力複核項目 (3)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

SKILL.md:20

Hardcoded URL

curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh

The URL points to a mutable installation script on a remote GitHub branch. No commit hash or integrity check pins the code that will execute.

低

references/text-overlay-bake.md:39

Hardcoded URL

The HTML preview loads Anton from Google Fonts, creating a real third-party network request. This is expected functionality but exposes the user's IP address to the font provider.

低

references/text-overlay-bake.md:140

Hardcoded URL

fontLink.href = 'https://fonts.googleapis.com/css2?family=Anton&display=swap';

The canvas workflow dynamically loads Anton from Google Fonts before rendering. This expected dependency creates a third-party request and a minor privacy and availability risk.

風險因素

⚙️ 外部命令 (40)

🌐 網路存取 (3)

references/text-overlay-bake.md:39 references/text-overlay-bake.md:140 SKILL.md:20

📁 檔案系統存取 (1)

references/text-overlay-bake.md:171

偵測到的模式

Pipe to shell pattern

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-youtube-thumbnail/security.svg)](https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-youtube-thumbnail/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/higgsfield-ai-higgsfield-youtube-thumbnail.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

higgsfield-ai. (2026). higgsfield-youtube-thumbnail security audit report (audit version 1) [Author version 0.12.0]. Skillstore. https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1

BibTeX 引用

@techreport{higgsfield-ai-higgsfield-ai-higgsfield-youtube-thumbnail-2026,
  author = {higgsfield-ai},
  title = {higgsfield-youtube-thumbnail security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1},
  note = {Author version 0.12.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "higgsfield-youtube-thumbnail security audit report (audit version 1)"
version: "0.12.0"
type: report
authors:
  - name: "higgsfield-ai"
date-released: "2026-08-10"
url: "https://skillstore.io/skills/higgsfield-ai-higgsfield-youtube-thumbnail/audits/1"
identifiers:
  - type: other
    value: "skillstore:higgsfield-ai-higgsfield-youtube-thumbnail:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 低

架構

100

可維護性

內容

社群

規範符合度

你可以打造什麼

Launch a YouTube Video

Create several truthful 16:9 thumbnail concepts with clear focal subjects and strong mobile readability.

Prepare Vertical Covers

Generate 9:16 Shorts covers or 4:5 Instagram covers while keeping faces in readable positions.

Maintain Brand Consistency

Use face references, logos, controlled variants, and focused edits across a recurring video series.

試試這些提示

Create a Basic Thumbnail

Create a truthful 16:9 YouTube thumbnail for a video titled "[title]" with one clear subject and no text.

Create Concept Variants

Create four distinct 16:9 concepts for "[topic]" using [face image], while preserving identity and avoiding unsupported claims.

Create a Vertical Cover

Create a 9:16 Shorts cover for "[topic]" with the face in the upper two-thirds and a two-word overlay.

Direct a Branded Variant Set

Create four branded variants for "[topic]" using [face images] and [logo], varying only concept, expression, and camera direction.

最佳實務

Provide the exact video promise, required scene details, target ratio, and approved reference images.
Keep one focal subject and verify that the concept remains readable near 120 pixels wide.
Review every result for truthful claims, identity accuracy, stray text, watermarks, and exact headline spelling.

避免

Do not imitate a reference thumbnail's identity or exact composition.
Do not request unsupported claims, invented statistics, false screenshots, or misleading outcomes.
Do not combine many subjects, props, labels, and effects into one crowded thumbnail.