跳转到正文
报告库
用途分类 / 数据分析

Interface Design Skill 安全审计

作者说它能做什么(原文)

Craft-first interface design for dashboards, admin panels, SaaS apps, tools, settings pages, data interfaces, and interactive products. Use when designing, building, reviewing, auditing, or refining product UI where visual craft, layout hierarchy, tokens, states, visual direction, or design-system consistency matter. Not for marketing pages, landing pages, campaigns, or brand-only work.

第三方安全检查结论

发现安全风险

已检查文件
2
发现的风险
3
会不会运行危险命令?检查是否下载程序后直接运行、让他人远程控制电脑,或藏起要运行的命令。发现 1 项风险
中风险

构建与测试步骤可能执行项目仓库中的任意脚本

原文依据:1 处
发现了什么

Skill 指示代理在修改后运行可用的 build、typecheck 和 tests,但没有要求先检查这些命令实际会执行什么。项目清单或测试配置可以把这些常规命令映射到任意本地程序。

为什么需要注意

如果被处理的仓库不可信,脚本可能读取代理可访问的凭据或文件、修改工作区之外的数据,或发起网络操作;实际影响取决于执行环境授予的权限。

这段证据能说明什么

该 Skill 确实要求在修改后运行相关构建、类型检查和测试;这些命令在某些仓库中可能触发项目自定义脚本。但提供的源码没有命令、清单或测试配置,无法证明会执行任意程序。这也是实现 UI 后的常规验证。用户可要求先展示并检查将运行的命令及其脚本定义,或仅允许已审核的检查。

这项判断针对展示的代码和适用条件,不表示风险已经实际发生。
SKILL.md:270来自说明文档打开原文件
3. For greenfield screens, major redesigns, or vague direction, consider a visual reference pass *if an image-generation tool is available* (skip otherwise — it's a companion, never the deliverable). Four modes: **direction board** (2–3 abstract mood/material/color explorations before code — no real UI), **UI reference** (medium-fidelity composition for a chosen direction), **paintover** (a stronger version of an existing screenshot), **raster asset** (empty-state art, textures — never icons/logos/charts). Always reject generic SaaS, illegible text, off-domain palettes; extract palette/density/proportions/signature, then build it in real code and verify in the browser.4. Patch the implementation, then run the relevant build/typecheck/tests when available.5. Verify visually for non-trivial UI. Use the inline render tool, a local browser, or screenshots at desktop and mobile widths; fix overlap, broken spacing, blank states, unreadable text, missing assets, and generic composition before presenting.
会不会泄露文件和密钥?检查是否发送含密码或密钥的文件,以及代码里是否直接写了密钥。发现 1 项风险
中风险

图像参考和截图绘制可能向图像工具披露界面中的敏感数据

原文依据:2 处
发现了什么

Skill 建议在可用时使用图像生成工具制作 UI reference 或对现有截图进行 paintover。若截图来自真实后台、客户界面或内部工具,其中的姓名、账号、业务指标、令牌或其他敏感内容会成为工具输入。

为什么需要注意

敏感界面内容可能离开本地项目并由图像服务处理,受该服务的存储、日志和数据使用政策约束。

该 Skill 明确建议在图像工具可用时,把现有截图用于 paintover,并允许用截图进行视觉验证。若截图来自真实后台或内部产品,它可能含有个人信息、账户标识或商业数据;提交给图像工具会让该工具处理这些内容。操作是条件性的,也没有证据表明任何截图已被上传。用户可要求先使用脱敏或虚构数据的截图,并禁止把真实客户或凭据数据交给图像工具。

SKILL.md:269来自说明文档打开原文件
2. Make the domain exploration concrete before choosing layout, color, type, density, and navigation.3. For greenfield screens, major redesigns, or vague direction, consider a visual reference pass *if an image-generation tool is available* (skip otherwise — it's a companion, never the deliverable). Four modes: **direction board** (2–3 abstract mood/material/color explorations before code — no real UI), **UI reference** (medium-fidelity composition for a chosen direction), **paintover** (a stronger version of an existing screenshot), **raster asset** (empty-state art, textures — never icons/logos/charts). Always reject generic SaaS, illegible text, off-domain palettes; extract palette/density/proportions/signature, then build it in real code and verify in the browser.4. Patch the implementation, then run the relevant build/typecheck/tests when available.
查看另外 1 个位置
SKILL.md:271来自说明文档打开原文件
4. Patch the implementation, then run the relevant build/typecheck/tests when available.5. Verify visually for non-trivial UI. Use the inline render tool, a local browser, or screenshots at desktop and mobile widths; fix overlap, broken spacing, blank states, unreadable text, missing assets, and generic composition before presenting.6. Keep user-facing updates short. Don't expose long private design monologues — surface the useful recommendation or decision.
会不会删除文件或一直在后台运行?检查是否大范围删除文件、改写磁盘,或设置自动启动。未发现风险
会不会绕过安全保护?检查是否跳过网站安全验证、开放过多文件权限,或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容?检查工作说明是否要求 AI 忽略你的指令、干扰检查结果,或夹带看不见的文字。发现 1 项风险
中风险

项目内的 system.md 被当作已决定的指令应用,存在提示注入入口

原文依据:4 处
发现了什么

Skill 要求读取并应用项目中的 `.interface-design/system.md`,并直接断言其中“decisions are made”,但没有要求把该文件仅作为不可信设计数据处理,也没有限制其中可影响的行为。

为什么需要注意

若仓库作者或依赖方在该文件中放入与设计无关的代理指令,代理可能被诱导扩大文件访问、运行命令或偏离用户请求。是否成功仍取决于宿主代理是否坚持更高优先级规则。

这段证据能说明什么

该 Skill 把仓库内 `.interface-design/system.md` 的内容视为已确定的设计决定并要求应用,因而该文件若包含越界指令,可能影响代理判断。不过源码语境将其限定为配色、间距、层级和组件模式等设计数据;未提供该文件内容,也未明确要求执行其中的命令。因此存在信任边界问题,但无法确认实际安全影响。用户可要求仅把它作为设计数据读取,并忽略命令、凭据请求或范围外指令。

这项判断针对展示的代码和适用条件,不表示风险已经实际发生。
SKILL.md:267来自说明文档打开原文件
1. Inspect the existing app, design tokens, component patterns, and `.interface-design/system.md` if present.2. Make the domain exploration concrete before choosing layout, color, type, density, and navigation.
查看另外 3 个位置
SKILL.md:287来自说明文档打开原文件
## Build flow- **If `.interface-design/system.md` exists:** read it and apply — decisions are made.- **If not:** explore domain (all four outputs) → propose (reference all four) → confirm when the direction is ambiguous or costly to change → build → run the checks below → offer to save.
SKILL.md:288来自说明文档打开原文件
## Build flow- **If `.interface-design/system.md` exists:** read it and apply — decisions are made.- **If not:** explore domain (all four outputs) → propose (reference all four) → confirm when the direction is ambiguous or costly to change → build → run the checks below → offer to save.
SKILL.md:305来自说明文档打开原文件
- Direction and feel- Depth strategy (borders/shadows/layered) and spacing base unit- Hierarchy decisions (type scale ratio, density values, focal pattern)- Key component patterns — add when a component is used 2+ times, is reusable, or has measurements worth remembering (not one-offs or prop variations). Record the values, e.g. `Button primary — 36px h · 12px 16px pad · 6px radius · 14px/500`.- Visual direction notes and selected references when an image pass shaped the design
会不会偷偷改推广链接或收款方?检查是否强制替换推广链接或收款对象,同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

8 个说明模块

该 Skill 面向产品界面设计与改进,要求先检查现有应用、设计令牌和组件模式,再修改实现并进行视觉验证。

查看原文
SKILL.md:267来自说明文档打开原文件
1. Inspect the existing app, design tokens, component patterns, and `.interface-design/system.md` if present.2. Make the domain exploration concrete before choosing layout, color, type, density, and navigation.3. For greenfield screens, major redesigns, or vague direction, consider a visual reference pass *if an image-generation tool is available* (skip otherwise — it's a companion, never the deliverable). Four modes: **direction board** (2–3 abstract mood/material/color explorations before code — no real UI), **UI reference** (medium-fidelity composition for a chosen direction), **paintover** (a stronger version of an existing screenshot), **raster asset** (empty-state art, textures — never icons/logos/charts). Always reject generic SaaS, illegible text, off-domain palettes; extract palette/density/proportions/signature, then build it in real code and verify in the browser.4. Patch the implementation, then run the relevant build/typecheck/tests when available.5. Verify visually for non-trivial UI. Use the inline render tool, a local browser, or screenshots at desktop and mobile widths; fix overlap, broken spacing, blank states, unreadable text, missing assets, and generic composition before presenting.6. Keep user-facing updates short. Don't expose long private design monologues — surface the useful recommendation or decision.

它优先复用项目现有的原生控件、组件库、设计系统和语义令牌,避免无障碍支持不足的自制控件。

查看原文
SKILL.md:180来自说明文档打开原文件
1. **Native HTML first** where it works. A `<button>` is a button; an `<a>` is a link; `<input type="text">`, `<dialog>`, `<details>` exist. Never `<div onClick>` something the platform already provides — you lose focus, keyboard, and semantics for free.2. **A battle-tested headless primitive** for anything stateful and hard to get right — select, combobox, dialog, popover, tooltip, dropdown menu, tabs, date picker. These ship keyboard navigation, focus management, ARIA, and collision/positioning that take days to reproduce correctly. Reach for what the ecosystem already trusts (e.g. Radix UI, React Aria, Ark, Headless UI, Vaul, `cmdk` in React; the equivalent accessible primitive in other frameworks), then style it to your direction. "Build custom" means *compose and style a primitive*, not write the behavior from scratch.3. **Hand-roll only as a genuine last resort** — no primitive fits, or there's no dependency budget. Then you owe the complete behavior contract: keyboard nav (arrow keys, Enter, Escape), focus trap/return, full ARIA roles and state, click-outside, and scroll-lock for overlays. A styled control missing these is broken, however good it looks.

持久化设计规范不是自动执行的:Skill 要求先询问用户,只有用户同意后才写入 `.interface-design/system.md`。

查看原文
SKILL.md:301来自说明文档打开原文件
# After Completing a TaskAlways offer to save: "Want me to save these patterns for future sessions?" If yes, write to `.interface-design/system.md`:- Direction and feel- Depth strategy (borders/shadows/layered) and spacing base unit- Hierarchy decisions (type scale ratio, density values, focal pattern)- Key component patterns — add when a component is used 2+ times, is reusable, or has measurements worth remembering (not one-offs or prop variations). Record the values, e.g. `Button primary — 36px h · 12px 16px pad · 6px radius · 14px/500`.- Visual direction notes and selected references when an image pass shaped the design
从这里开始 · 工作说明SKILL.md
interface-design
连线表示工作说明包含的模块,不是实际运行顺序。点击模块可查看原文。 另有 7 个章节,可在原文件中查看。
文件与检查记录2 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围;纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文
  • agents/openai.yaml已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件,没有实际运行 Skill,也没有检查它另外安装的软件包。因此,这不是“保证安全”的承诺;换了版本或使用环境,结果也可能不同。

  • SKILL.md工作说明
  • agents/openai.yaml配套文件
读取了多少行
328
文件校验值(用于核对版本)
095caf4408fa17512dabf80a273fd5ba1b186bc6159d75dae7542e126a29d668