技能 hairline-create

📦

hairline-create

Name: hairline-create
Author: lucasmarkes

內容修訂 r1 中風險 ⚙️ 外部命令⚡ 包含腳本📁 檔案系統存取🔑 環境變數🌐 網路存取

Create Interactive Hairline Figures

Interactive line illustrations require consistent geometry, motion, and visual checks. This skill guides concept selection, builds a standalone HTML figure, and checks its structure and appearance.

支援: Claude Codex Code(CC)

📊 70 尚可

Maintain this Skill? Claim it 📊 70 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "hairline-create" from https://skillstore.io/skills/lucasmarkes-hairline-create.md and its manifest at https://skillstore.io/api/skills/lucasmarkes-hairline-create/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/lucasmarkes-hairline-create.md 已簽名 manifest GET /api/skills/lucasmarkes-hairline-create/manifest 已簽名 lockfile GET /api/skills/lucasmarkes-hairline-create/lockfile

測試它

正在使用「hairline-create」。 Suggest a Hairline metaphor for a deployment pipeline.

預期結果:

Locks: stepped canal basins open in sequence from the selected lock; the readout names its stage.
Marble run: hovering slows rolling marbles so the selected ramp can be inspected.
Cabinet: nearby server blades slide outward as the pointer selects an update position.

正在使用「hairline-create」。 Build the supplied Riffle example and describe its interaction.

預期結果:

A standalone HTML page shows eight cards in a rounded tray. The selected card rises, neighboring cards lean away, and the slider controls stagger timing.

正在使用「hairline-create」。 Describe the visual inspection deliverables for a completed figure.

預期結果:

A labeled PNG sheet compares eight states, including thumbnails, slider extremes, and dark and light themes.
The inspection reports frame bounds, readouts, console messages, and settling observations.
Unverified visual checks are disclosed when no browser is available.

安全審計

中風險

v1 • 2026/10/4 開啟版本化報告

Most static matches are benign JavaScript syntax, documentation, CSS, or intended local file operations. Automatic npm installation exposes the host to mutable dependencies and enabled lifecycle scripts, while browser inspection lacks network isolation. No evidence found of credential theft, malicious supplied figures, or audit-directed prompt injection.

已掃描檔案

1,859

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

中

validate.mjs:89-93 look.mjs:111-112 look.mjs:133-138

Browser Inspection Lacks Network Isolation

The validator rejects literal API names, but does not establish a security boundary for JavaScript. Accepted figures execute without network blocking, so computed API access can reach external or local network services.

Source inspection shows regex-based API rejection and page navigation without request blocking. No evidence found of actual exfiltration or malicious supplied figures.

能力複核項目 (2)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

look.mjs:26

Node.js child_process module

import { spawnSync } from "node:child_process";

The imported spawnSync is used at line 78 for automatic npm installation. Mutable dependency resolution and enabled lifecycle scripts expose the host to supply-chain execution.

高

look.mjs:78

Synchronous spawn

const run = spawnSync(win ? "npm.cmd" : "npm", ["install", "playwright-core@1", "--prefix", dir, "--

spawnSync automatically installs playwright-core@1 without disabling npm lifecycle scripts. A compromised dependency or existing cache manifest can execute host commands during installation.

風險因素

⚙️ 外部命令 (50)

⚡ 包含腳本 (9)

build.mjs:25 look.mjs:79 look.mjs:179 validate.mjs:138 validate.mjs:142 validate.mjs:166 validate.mjs:167 validate.mjs:180 validate.mjs:185

📁 檔案系統存取 (28)

🔑 環境變數 (1)

look.mjs:56

🌐 網路存取 (1)

validate.mjs:89

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/lucasmarkes-hairline-create/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/lucasmarkes-hairline-create/security.svg)](https://skillstore.io/skills/lucasmarkes-hairline-create?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/lucasmarkes-hairline-create?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/lucasmarkes-hairline-create/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/lucasmarkes-hairline-create.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

lucasmarkes. (2026). hairline-create security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/lucasmarkes-hairline-create/audits/1

BibTeX 引用

@techreport{lucasmarkes-lucasmarkes-hairline-create-2026,
  author = {lucasmarkes},
  title = {hairline-create security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/lucasmarkes-hairline-create/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "hairline-create security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "lucasmarkes"
date-released: "2026-10-04"
url: "https://skillstore.io/skills/lucasmarkes-hairline-create/audits/1"
identifiers:
  - type: other
    value: "skillstore:lucasmarkes-hairline-create:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Prototype a Pointer Interaction

Explore how a tray, stack, or field responds to pointer movement before adapting the interaction to a product.

Build a Shareable Illustration

Create a standalone HTML line figure with theme switching, an intensity slider, and no runtime external assets.

Explain a Process Through an Object

Translate a process into a recognizable physical metaphor with one gesture and a short readout.

試試這些提示

Choose a Concept

Suggest three Hairline concepts for [idea]. Describe each object, pointer response, and short readout. Wait for my choice before building.

Create a Figure

Create a Hairline figure of [object] that [pointer action]. Use the supplied engine and page, then validate the HTML. Ask before installing dependencies.

Inspect Every State

Inspect [figure file] using [answer point] and [edge points]. Capture the eight views, report failures, and inspect the sheet. Ask before installing dependencies.

Refine Without Changing the Engine

Refine [figure file] to [requested change]. Edit only the figure, preserve stable hit areas, rerun validation, and disclose unverified checks. Ask before installing dependencies.

最佳實務

Choose one recognizable object, one pointer gesture, and a composed rest pose before writing the figure.
Keep the engine and page unchanged, and review dependency installation before running browser inspection.
Validate after every edit, inspect all eight views, and disclose any checks that could not be performed.

避免

Modify the engine or page template to work around a figure problem.
Add labels, icons, custom colors, or independent animation timers inside the drawing.
Treat a passing text validator as proof of visual quality or security isolation.