Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

frontend-slides-editable

skill · archlizheng/frontend-slides-editableMIT licenceAudited 20 Oct 2026 · source 341994c34f27

★ 534pushed 111 days ago
✓SAFEGrade B · 89/100 · 20 Oct 2026 · 341994c
534repo stars · whole archlizheng/frontend-slides-editable

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 341994c34f27 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Use when the user wants a single-file HTML presentation that stays editable in the browser after generation, or needs object-level layout editing, slide reordering, local save/export, or PPT/PDF-to-web conversion with…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “frontend-slides-editable (archlizheng/frontend-slides-editable)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/archlizheng/frontend-slides-editable

Trust audit

Audit 0.4.1 · source read 20 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium3 low5 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesNot pinnedSome versions float
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS5
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS1
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS2
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (8)

LOWSupply chainsupply.unpinned · package.json
F-08 Supply chainCWE-829 · CWE-1357Layer L1
puppeteer-core
Why
1 dependency range(s) float
Fix
pin exact versions or ship a lockfile
LOWPrompt injectionprompt.authority_framing · beautiful-html-templates/templates/raw-grid/template.html:911
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
<p class="t-body">Accepted ventures join the next cohort with full access to all resources.</p>
Why
No further detail recorded for this rule.
Fix
—
LOWPrompt injectionprompt.authority_framing · examples/generated/presets/raw-grid.html:1713
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
<p class="t-body" data-edit-slot="s5-slot-4" data-slot-type="text" data-slot-label="Accepted ventures join the next cohort with full" data-slot-locked-layout="true">Accepted ventures join the next coh
Why
No further detail recorded for this rule.
Fix
—
INFOInventory / provenanceinv.oversize · docs/preset-previews/8-bit-orbit-cover.png
F-13 Inventory / provenanceCWE-1104Layer L0
docs/preset-previews/8-bit-orbit-cover.png
Why
1051678 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · docs/preset-previews/8-bit-orbit-later.png
F-13 Inventory / provenanceCWE-1104Layer L0
docs/preset-previews/8-bit-orbit-later.png
Why
1054369 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · docs/preset-previews/pin-and-paper-cover.png
F-13 Inventory / provenanceCWE-1104Layer L0
docs/preset-previews/pin-and-paper-cover.png
Why
1220747 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · docs/preset-previews/pink-script-cover.png
F-13 Inventory / provenanceCWE-1104Layer L0
docs/preset-previews/pink-script-cover.png
Why
1410869 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · docs/preset-previews/pink-script-later.png
F-13 Inventory / provenanceCWE-1104Layer L0
docs/preset-previews/pink-script-later.png
Why
1427438 bytes not read
Fix
—

Audit 0.4.1 · source sha 341994c34f27 · 20 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherarchlizheng GitHub userOwner of the repository this skill is read from
  • Source folderarchlizheng/frontend-slides-editableThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict341994c34f27A new audit runs when the source changes
  • Repository statusNot archivedLast push 111 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Use when the user wants a single-file HTML presentation that stays editable in the browser after generation, or needs object-level layout editing, slide reordering, local save/export, or PPT/PDF-to-web conversion with…

---
name: frontend-slides-editable
description: Use when the user wants a single-file HTML presentation that stays editable in the browser after generation, or needs object-level layout editing, slide reordering, local save/export, or PPT/PDF-to-web conversion with continued editing.
---

<objective>
Frontend Slides (Editable)

Create zero-dependency, animation-rich HTML presentations that run entirely in the browser **with a built-in editor**: move objects, multi-select with **Ctrl+click**, alignment snapping, simple text formatting with **font family + size controls**, **undo/redo**, a **Pages** sidebar (slide thumbnails, drag to reorder, delete), presentation tools (**Laser** pointer and **Fullscreen**), **Ctrl+S** persistence, and **export HTML**.

This skill is a **copy of the `frontend-slides` skill** extended with the editable deck runtime. For read-only decks without editor weight, use the original **`frontend-slides`** skill instead (same skills directory layout).
</objective>

<preset_fidelity>
Parity with parent `frontend-slides` (style flexibility)

**Adding edit mode must not replace preset authoring.** The parent skill treats each choice in [STYLE_PRESETS.md](STYLE_PRESETS.md) as a **spec**: per preset you implement its **Layout** prose, **Signature Elements**, typography, and colors — title slides and content slides **differ across presets** (e.g. Bold Signal’s card + big numerals vs. Notebook Tabs’ paper + edge tabs vs. Swiss Modern’s grid + red bar).

**Normative behavior in Phase 3:**

1. **Read STYLE_PRESETS for the chosen preset(s)** and reflect **layout + signatures** in HTML/CSS, not only `:root` colors and fonts.
2. **The editable reference** ([examples/editable-deck-reference.html](examples/editable-deck-reference.html)) supplies **JS/CSS patterns** (chrome, sidebar, objects, history) — not a **frozen slide layout** to paste on every deck. Do **not** reuse one generic “title + subtitle + corner rounded rectangle” geometry for every style.
3. **`examples/generated/presets/*.html`** are sample decks, not a layout shortcut. The 12 legacy samples are runtime smoke + visual previews; the 34 ported samples are real-template ports from `beautiful-html-templates` using the shared Swiss/reference runtime plus locked slot editing. For real deliveries, match the chosen preset/template grammar instead of reusing a generic README deck.
4. **Static chrome** (decorations that should not be draggable) may live outside `.slide-edit-layer` (e.g. background pseudo-elements, fixed nav chrome) per preset; **movable** copy and blocks stay as `[data-slide-object]` inside the layer.

If runtime constraints ever conflict with a signature element, **adapt the element** (e.g. implement the same visual with CSS, or split into multiple objects) — do **not** drop preset identity for the sake of a single template.
</preset_fidelity>

<template_ports>
Real-template ports (slot-editable)

For the 34 ported presets from `beautiful-html-templates`, prefer the upstream template's **mood / tone / density** and visual grammar over color-token matching alone.

Interaction baseline: ported decks must use the same Swiss/reference editor chrome and object editor as `examples/editable-deck-reference.html` / `swiss-modern.html`. Native template slots are locked-layout content slots; user-added objects are normal `[data-slide-object][data-oid]` objects.

**Important interaction contract:** `data-edit-slot` is editable content, not a draggable component. In edit mode the user can click slot text/images to change their content with RTE/Undo/Redo/Save/Export, but the upstream template's layout grid, card geometry, decorative layers, and spacing stay locked. Only user-added objects in `.slide-edit-layer` become selectable, draggable, resizable components. Do not promise that every native template child will get object handles unless a separate componentization mode is explicitly requested and implemented.

Template edit modes:

- `data-template-edit-mode="slots"` is the default. It is template-safe: authored content is editable through slots, while layout and decoration remain locked.
- `data-template-edit-mode="components"` is an optional generated mode for semantic blocks that can be represented as `[data-slide-object]`.
- In delivered ported decks, **Unlock layout** componentizes the current slide on demand by moving/wrapping the original editable slot nodes into `.slide-edit-layer`. It must preserve the original element tag, classes, and computed typography, must not create duplicate content copies, and must be undoable back to the original layout position.
- Never componentize every DOM node. Exclude backgrounds, grids, axes, ticks, decorative marks, texture/glitch layers, SVG paths, animation wrappers, and pure layout containers.

When using or extending a ported preset:

1. Treat the matching `beautiful-html-templates/templates/{source_slug}/template.html` as the visual system: preserve fonts, CSS variables, slide-level classes, layout grid, decorative DOM, and component grammar.
2. Edit authored content through slots, not by decomposing the template into draggable boxes. Use:
   - `data-edit-slot`
   - `data-slot-type="text|image|metric|table-cell"`
   - `data-slot-label`
   - `data-slot-locked-layout="true"`
3. Keep decorative elements locked unless the user should naturally change that exact item. Grids, paper texture, hairlines, scan lines, pixel/glitch layers, ornamental marks, and layout containers should not become draggable objects.
4. Preserve `.slide-edit-layer` for user-added freeform objects. Added objects can use `[data-slide-object][data-oid]` and the normal Swiss drag/resize/multi-select runtime; native template slots use the Swiss RTE/Undo/Redo/Save/Export path but do not get move/resize handles.
5. If a needed slide type is missing, design a new slide in the same template system: same fonts, palette, spacing rhythm, chrome, and component grammar. Do not mix in another template's visual la

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 341994c

Download folder ↗
npx skills add archlizheng/frontend-slides-editable
npx skills add https://github.com/archlizheng/frontend-slides-editable
npx skills add https://github.com/archlizheng/frontend-slides-editable --skill frontend-slides-editable
git clone https://github.com/archlizheng/frontend-slides-editable.git ~/.codex/skills/frontend-slides-editable
git clone https://github.com/archlizheng/frontend-slides-editable.git ~/.claude/skills/frontend-slides-editable

Commands as the repository documents them: shown, never run by us. Our verdict covers commit 341994c34f27 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 341994c34f27

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/archlizheng/frontend-slides-editable/badge.svg)](https://modelsatlas.com/skills/archlizheng/frontend-slides-editable/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/archlizheng/frontend-slides-editable/badge.svg)](https://modelsatlas.com/skills/archlizheng/frontend-slides-editable/)

Questions about frontend-slides-editable

What does the frontend-slides-editable skill do?
Editable HTML presentation skill for Codex/Claude Code with drag-resize editing, slide reordering, local save/export, and PPTX-to-web conversion. Shout out to @zarazhangrui
Is frontend-slides-editable safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can frontend-slides-editable access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does frontend-slides-editable work with?
Its documentation mentions claude-code, codex and cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (341994c34f27), read on 2026-10-20. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.