Security audit
Security checks for vulnerabilities and agentic risk
This is mostly a local HTML design toolkit, but it defaults to inserting IFQ branding into user and client deliverables, including possible ifq.ai attribution or links.
Review this skill before installing if you produce commercial, client-owned, or white-label design work. Ask explicitly for clean-room white-label output and audit generated HTML for ifq.ai text, links, colophons, or IFQ visual marks. Avoid opening or reusing showcase files that load unpkg.com scripts unless that network execution is acceptable.
SKILL.md:121Mandatory IFQ Promotional Branding Injected into User and Client Deliverables
assets/showcases/website-ai-nav/ainav-build.html:13Third-Party JavaScript Retrieved and Executed Without Subresource Integrity
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- **Package safety**: zero dependencies, zero npm lifecycle hooks, only allowed
script names.
- **ClawHub cleanliness**: clawhub.ignore.txt excludes VCS metadata, agent state,
.env files, personal assets, and build artifacts.
- **Font loading protocol**: Google Fonts must use Tier B non-blocking pattern
(media="print" + onload swap) for CN/offline friendliness.
- **Template runtime isolation**: no remote JS/CSS runtimes in forkable templates;
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- **Package safety**: zero dependencies, zero npm lifecycle hooks, only allowed
script names.
- **ClawHub cleanliness**: clawhub.ignore.txt excludes VCS metadata, agent state,
.env files, personal assets, and build artifacts.
- **Font loading protocol**: Google Fonts must use Tier B non-blocking pattern
(media="print" + onload swap) for CN/offline friendliness.
- **Template runtime isolation**: no remote JS/CSS runtimes in forkable templates;
The declared description presents a broad visual design skill intended for HTML-first design deliverables and related presentation/export tasks. The supplied code does not implement design generation, prototyping, export planning, critique, or any visual composition workflow. Instead, it provides a focused utility for resolving dates from inputs or document metadata and replacing placeholder tokens in DOM nodes marked with data attributes. This is a materially different primary purpose, so the description does not accurately represent the code's behavior.
Referenced artifact was not completely inspected
rk a template, weave the IFQ ambient layer, verify the artifact.","entrypoint":"SKILL.md","homepage":"https://github.com/peixl/ifq-design-skills","os":["darwin"
Referenced artifact was not completely inspected
eo: load [references/animation-pitfalls.md](references/animation-pitfalls.md), [references/animation-best-practices.md](references/animation-best-practices.md),
Referenced artifact was not completely inspected
eo: load [references/animation-pitfalls.md](references/animation-pitfalls.md), [references/animation-best-practices.md](references/animation-best-practices.md),
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
@import url('https://fonts.googleapis.com/css2?family=Inter:wght@400;500;700;900&family=Noto+Serif+SC:wght@700;900&display=swap');
</style>
<!-- Warm accent gradients for mini mockup highlights -->
<linearGradient id="hdBarGrad" x1="0" y1="0" x2="0" y2="1">
<stop offset="0%" stop-color="#D4532B"/>
<stop offset="100%" stop-color="#A83518"/>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
letter-spacing="-3"
>IFQ Design</text>
<!-- Chinese subtitle -->
<text
x="80"
y="222"
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
letter-spacing="0.3"
>20 种设计哲学 · 5 维专家评审 · 发布会级动画导出</text>
<!-- Footer credit -->
<text
x="80"
y="370"
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<head>
<meta charset="UTF-8">
<title>Deck · Multi-file Slide Index</title>
<!--
deck_index.html — 多文件 slide deck 的拼接器
配合「每页一个独立 HTML」架构使用。与单文件 deck_stage.js 对比：
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<head>
<meta charset="UTF-8">
<title>Deck · Multi-file Slide Index</title>
<!--
deck_index.html — 多文件 slide deck 的拼接器
配合「每页一个独立 HTML」架构使用。与单文件 deck_stage.js 对比:
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!DOCTYPE html>
<!-- IFQ legacy showcase reference — retained for fallback comparison and scheduled for regeneration. -->
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!DOCTYPE html>
<!-- IFQ legacy showcase reference — retained for fallback comparison and scheduled for regeneration. -->
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<body>
<div class="container">
<!-- Label -->
<div class="label">System Architecture</div>
<!-- Title -->
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<div class="header-subtitle">A systematic approach to AI memory architecture optimization</div>
</div>
<!-- Hero Numbers -->
<div class="hero-section">
<span class="hero-num">93</span>
<span class="hero-unit">KB</span>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</div>
</div>
<!-- Section 02: Memory Architecture -->
<div class="section">
<div class="section-header">
<span class="section-num">02</span>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!DOCTYPE html>
<!-- IFQ legacy showcase reference — retained for fallback comparison and scheduled for regeneration. -->
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!DOCTYPE html>
<!-- IFQ legacy showcase reference — retained for fallback comparison and scheduled for regeneration. -->
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!DOCTYPE html>
<!-- IFQ legacy showcase reference — retained for fallback comparison and scheduled for regeneration. -->
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<body>
<div class="container">
<!-- Background decorations -->
<div class="bg-circle bg-circle-1"></div>
<div class="bg-circle bg-circle-2"></div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!DOCTYPE html>
<!-- IFQ legacy showcase reference — retained for fallback comparison and scheduled for regeneration. -->
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!DOCTYPE html>
<!-- IFQ legacy showcase reference — retained for fallback comparison and scheduled for regeneration. -->
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</head>
<body>
<div class="container">
<!-- LEFT PANEL -->
<div class="left-panel">
<div class="top-bar">
<div class="logo">INK<span>WELL</span></div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</head>
<body>
<!-- Navigation -->
<nav>
<div class="nav-logo">
<div class="nav-logo-icon"><i data-lucide="zap" style="width:16px;height:16px;"></i></div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</div>
</section>
<!-- Quick Links -->
<div class="quick-links">
<a href="#" class="quick-link"><i data-lucide="rocket" style="width:14px;height:14px;"></i> Getting Started</a>
<a href="#" class="quick-link"><i data-lucide="file-text" style="width:14px;height:14px;"></i> API Reference</a>
No suspicious patterns detected.