跳转到正文
报告库
用途分类 / 其他用途

Frontend Design Skill 安全审计

作者说它能做什么(原文)

Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one. Helps with aesthetic direction, typography, and making choices that don't read as templated defaults.

第三方安全检查结论

发现安全风险

已检查文件
2
发现的风险
1
会不会运行危险命令?检查是否下载程序后直接运行、让他人远程控制电脑,或藏起要运行的命令。未发现风险
会不会泄露文件和密钥?检查是否发送含密码或密钥的文件,以及代码里是否直接写了密钥。发现 1 项风险
中风险

可能把当前需求之外的客户记忆带入设计

原文依据:1 处
发现了什么

当需求没有说明产品主题时,该 Skill 明确要求代理利用其“记忆”中的客户偏好或项目背景。它没有限定记忆必须来自当前对话、当前项目或经用户批准的资料。

为什么需要注意

如果代理能够访问其他会话或项目的记忆,敏感的产品计划、偏好或客户背景可能体现在提案、文案或界面中,从而跨越原有上下文边界。

当 brief 未说明主题时,这条实时指令要求代理利用其记忆中的客户偏好或项目背景,而且没有把来源限定为当前对话或当前项目。若运行环境保留了其他会话、客户或旧项目的信息,代理可能把无关、过时或不应跨项目使用的资料带入设计判断,影响用户决策或造成信息边界混淆;文本并未证明任何数据已经被读取或披露。用户可要求作者将可用背景限定为当前会话和明确授权的项目文件,并在使用记忆前说明来源并征得确认。

SKILL.md:13来自说明文档打开原文件
If the brief does not identify what the product or subject matter is, identify it yourself before designing, and confirm with the client. You can come up with one concrete subject, the design's audience, and the design's primary job, as a proposal. If there's any information in your memory about the client's preferences or context about what they're building, use that as a hint. The subject's industry, subject matter, materials, and vernacular are where distinctive visual choices come from — a design for a toy for girls aged 8–11 will be very aesthetically different from a dashboard for financial analysts. Build with the brief's real content and subject matter throughout.
会不会删除文件或一直在后台运行?检查是否大范围删除文件、改写磁盘,或设置自动启动。未发现风险
会不会绕过安全保护?检查是否跳过网站安全验证、开放过多文件权限,或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容?检查工作说明是否要求 AI 忽略你的指令、干扰检查结果,或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方?检查是否强制替换推广链接或收款对象,同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

5 个说明模块

该 Skill 是一套前端设计与文案指导,不包含安装命令、可执行脚本、网络请求或凭据处理代码。它要求先形成颜色、字体、布局和设计原则,再对照需求复核,最后才编写代码。

查看原文
SKILL.md:47来自说明文档打开原文件
Work in two passes. First, brainstorm a short design plan based on the client's design brief: create a compact token system with color, type, layout, and principles.- Color: describe the core base palette as 4–6 named hex values.- Type: the typefaces and their roles.- Layout: a layout concept, using one-sentence prose descriptions and ASCII wireframes to ideate and compare. Include alignment guidance; should the content be left aligned, center aligned, justified?- Principles: the high-level guidance for what makes this page unique.Then review that plan against the brief before building: if any part of it reads like the generic default you would produce for any similar page (work through a similar prompt to see if you arrive somewhere similar) rather than a choice made for this specific brief — revise that part, say what you changed and why. Only after you've confirmed the relative uniqueness of your design plan should you start to write the code, following the revised plan.

该 Skill 要求生成的界面考虑移动端、键盘焦点、减少动态效果和视觉可访问性;如果环境支持,还会建议通过截图检查作品。

查看原文
SKILL.md:59来自说明文档打开原文件
Spend your boldness in one place. Let one element be the memorable thing, keep everything around it quiet and disciplined, and cut any decoration that does not serve the brief. Build to a quality floor without announcing it: responsive down to mobile, visible keyboard focus, reduced motion respected, visually accessible, harmonious color palettes. Critique your own work as you build, taking screenshots to review if your environment supports it — a picture is worth 1000 tokens. Consider Chanel's advice: before leaving the house, take a look in the mirror and remove one accessory. Human creatives have memory and always try to do something new, so if you have a space to quickly jot down notes about what you've tried, it can help you in future passes.
从这里开始 · 工作说明SKILL.md
frontend-design
连线表示工作说明包含的模块,不是实际运行顺序。点击模块可查看原文。

文件引用关系图

1 处引用
哪些文件发起引用引用了什么
连线表示真实的文件引用,不是运行顺序。点击节点可高亮相关连线,并查看具体文件和原文位置。虚线表示还有文件需要定位。
文件与检查记录2 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围;纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文
  • LICENSE.txt已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件,没有实际运行 Skill,也没有检查它另外安装的软件包。因此,这不是“保证安全”的承诺;换了版本或使用环境,结果也可能不同。

  • LICENSE.txt许可说明
  • SKILL.md工作说明
读取了多少行
250
文件校验值(用于核对版本)
732d95b0f024ac1f39ac13dad7d2de4b997eaf0139d2f193119f93d2214eb941