技能 feeling-search
📦

feeling-search

v1.1.0 內容修訂 r3 中風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數

Find Visual Styles from Mood Descriptions

Vague mood descriptions make visual direction difficult to communicate. Feeling Search uses a cached lexicon to suggest named styles and matching vocabulary, with optional paid cloud analysis.

支援: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 50 差

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求
Review the Skillstore skill "feeling-search" from https://skillstore.io/skills/xixi048-feeling-search.md and its manifest at https://skillstore.io/api/skills/xixi048-feeling-search/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/xixi048-feeling-search.md 已簽名 manifest GET /api/skills/xixi048-feeling-search/manifest 已簽名 lockfile GET /api/skills/xixi048-feeling-search/lockfile

測試它

正在使用「feeling-search」。 Match the mood: walking alone past a convenience store in the rain under cold white light.

預期結果:

  • Documented local example, translated from Chinese: matched words include light and white.
  • Listed candidates include Delft School at 0.25 and De Stijl at 0.22.
  • These are dictionary ranking scores, not confidence probabilities or guaranteed artistic matches.

正在使用「feeling-search」。 Explain the word cold light using the free lookup endpoint.

預期結果:

  • API documentation example: cold light means even illumination with a high color temperature.
  • The example associates this term with Luminism and reports its use across 17 styles.
  • Related vocabulary includes cool white and fluorescent light; confusing opposite terms require care.

正在使用「feeling-search」。 Analyze a description with no local matches, without approving cloud analysis.

預期結果:

  • Source: local. No dictionary words matched.
  • Paid cloud analysis was not called because cloud permission was not enabled.
  • Try free fuzzy matching before considering a paid request.

安全審計

中風險
v3 • 2026/10/27 開啟版本化報告

Most static alerts are false positives from Markdown backticks, multilingual documentation, normal cache operations, and documented API access. Quota tokens lack explicit restrictive file permissions, appear in request URLs, and lack transport origin protections. No evidence found of malicious exfiltration intent, prompt injection, hidden command execution, or code obfuscation.

3
已掃描檔案
1,066
分析行數
1
複核項目
0
已忽略的誤報

已確認的安全問題 (2)

中
scripts/fs_api.py:392-406references/api-contract.md:135-137
Quota Credentials Exposed in Request URLs
Quota setup and balance checks put the bearer token in the URL query. Reverse proxies and access logs can retain this spendable credential.
Both quota request paths concatenate the token into the URL. The API contract supports header authentication, so URL exposure is avoidable.
中
scripts/fs_api.py:75-76scripts/fs_api.py:148-158scripts/fs_api.py:171-183scripts/fs_api.py:495-498scripts/fs_api.py:518-534
Quota Credentials Lack HTTPS Origin Protection
FS_API_BASE accepts HTTP, and default urllib redirects can forward X-FS-Quota headers across origins. Misconfigured endpoints or unsafe redirects can expose quota credentials.
Endpoint configuration has no scheme validation, and both transports use urllib defaults without redirect restrictions. Exploitation requires unsafe configuration or a cross-origin redirect.
能力複核項目 (1)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

中
scripts/fs_api.py:117
Python file write/append
with open(tmp, "w", encoding="utf-8") as fh:
Quota tokens are written in plaintext without restrictive permissions; common umasks create files readable by other local users.

風險因素

⚙️ 外部命令 (50)
scripts/fs_api.py:103 scripts/fs_api.py:216 scripts/fs_api.py:402 scripts/fs_api.py:403 scripts/fs_api.py:488 scripts/fs_api.py:489 SKILL.md:17-21 SKILL.md:21-38 SKILL.md:38-40 SKILL.md:40-45 SKILL.md:45-47 SKILL.md:47-50 SKILL.md:50-52 SKILL.md:52 SKILL.md:61-62 SKILL.md:62-68 SKILL.md:68-70 SKILL.md:70-72 SKILL.md:72-73 SKILL.md:73-77 SKILL.md:77-79 SKILL.md:79-81 SKILL.md:81-86 SKILL.md:86-92 SKILL.md:92-95 SKILL.md:95 SKILL.md:97-101 SKILL.md:101-105 SKILL.md:105-107 SKILL.md:107 SKILL.md:108-110 SKILL.md:110 SKILL.md:111-112 SKILL.md:112-116 SKILL.md:116-119 SKILL.md:119-123 SKILL.md:123-126 SKILL.md:126-128 SKILL.md:128 SKILL.md:129 SKILL.md:134-140 SKILL.md:140-141 SKILL.md:141-142 SKILL.md:142-143 SKILL.md:143 SKILL.md:144-145 SKILL.md:145-146 SKILL.md:146-147 SKILL.md:147-149 SKILL.md:149
🌐 網路存取 (10)
scripts/fs_api.py:46 scripts/fs_api.py:151 scripts/fs_api.py:156 scripts/fs_api.py:175 scripts/fs_api.py:181 scripts/fs_api.py:27 scripts/fs_api.py:31 scripts/fs_api.py:54 SKILL.md:112 SKILL.md:158
📁 檔案系統存取 (12)
scripts/fs_api.py:33 scripts/fs_api.py:33 scripts/fs_api.py:117 scripts/fs_api.py:222 scripts/fs_api.py:112 scripts/fs_api.py:220 SKILL.md:73 SKILL.md:110 SKILL.md:159 SKILL.md:73 SKILL.md:110 SKILL.md:159
🔑 環境變數 (4)
scripts/fs_api.py:76 scripts/fs_api.py:80 scripts/fs_api.py:84 scripts/fs_api.py:143
審計單位: codex 檢視審計紀錄 →
分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告
安全評估

複製報告連結

https://skillstore.io/skills/xixi048-feeling-search/audits/3?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/xixi048-feeling-search/security.svg)](https://skillstore.io/skills/xixi048-feeling-search?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/xixi048-feeling-search?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xixi048-feeling-search/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/xixi048-feeling-search.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
學術引用 (APA · BibTeX · CFF)

APA 引用

xixi048. (2026). feeling-search security audit report (audit version 3) [Author version 1.1.0]. Skillstore. https://skillstore.io/skills/xixi048-feeling-search/audits/3

BibTeX 引用

@techreport{xixi048-xixi048-feeling-search-2026, author = {xixi048}, title = {feeling-search security audit report (audit version 3)}, institution = {Skillstore}, year = {2026}, number = {3}, url = {https://skillstore.io/skills/xixi048-feeling-search/audits/3}, note = {Author version 1.1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "feeling-search security audit report (audit version 3)" version: "1.1.0" type: report authors: - name: "xixi048" date-released: "2026-10-27" url: "https://skillstore.io/skills/xixi048-feeling-search/audits/3" identifiers: - type: other value: "skillstore:xixi048-feeling-search:audit:3" description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據 證據置信度: 中
64
架構
100
可維護性
87
內容
65
社群
91
規範符合度

你可以打造什麼

Translate Creative Briefs

Convert a client mood description into candidate visual styles and matched vocabulary for a design discussion.

Develop Environment Art Direction

Compare styles for a game location and inspect each candidate through definitions, matched terms, and optional paid references.

Prepare Image Prompt Vocabulary

Find style names and distinguishing terms for prompts used in a separate image generation tool.

試試這些提示

Find Initial Style Candidates 
Find visual styles for this mood: [description]. Use free local matching and report style names, definitions, and matched words.
Improve Sparse Local Matches 
Analyze [description] locally, then retry with fuzzy matching if results are sparse. Compare both results without using paid cloud analysis.
Compare Style Vocabulary 
Compare [style A] and [style B] using their vocabulary and free word lookups. Highlight distinguishing terms and explain overlaps.
Retrieve Approved Paid References 
Use one paid image request for these styles: [up to five IDs]. Report image type, attribution, and source links; exclude placeholders.

最佳實務

  • Use free local matching first, and approve any paid cloud or image request explicitly.
  • Keep descriptions concise, inspect matched words, and treat ranking scores as suggestions rather than artistic certainty.
  • Protect quota credentials, retain image attribution, and exclude placeholder images from visual references.

避免

  • Uploading confidential creative briefs through cloud analysis or remote lookups without permission.
  • Treating dictionary matches as complete semantic interpretation or a guaranteed correct art direction.
  • Assuming reference images are generated artwork or that commercial reuse rights are automatically verified.

常見問題

Does Feeling Search generate images?
No. It suggests visual styles and vocabulary, and can request reference image metadata from the service.
Which operations are free?
Local matching, dictionary downloads, word lookups, style vocabulary, status checks, and quota balance checks are documented as free.
When does analysis use the paid cloud endpoint?
Only when local word matches are zero, cloud permission is enabled, and a quota token is available. Reference retrieval is separately paid.
Can I use it without an internet connection?
Local analysis works with a valid downloaded dictionary and offline mode. Expired caches currently fail offline, and remote lookup commands cannot run offline.
What does installation require?
The client uses Python 3.8 or later and the standard library. A dictionary download is needed before local matching.
How should I protect quota credentials and reference rights?
Restrict credential file access and use trusted HTTPS endpoints. Check reference licenses and attribution before reuse; marketplace review does not verify image rights.

開發者詳細資訊

作者

xixi048

授權

MIT

作者版本

v1.1.0

Skillstore 修訂

r3

儲存庫

https://github.com/xixi048/feeling-search-skill/tree/d9929f14bb04d510ab9771bfd9f8c5a8cb8fa4d0/skills/feeling-search

引用

1e22a7c9000672c440acafc13dc0c17f8ae8d00a

維護新鮮度

2026/10/27

使用量

0 次下載 · 1 次瀏覽

檔案結構

📁 references/

📄 api-contract.md

📁 scripts/

📄 fs_api.py

📄 SKILL.md

xixi048 的更多技能

查看全部

相關技能

查看全部