Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

ljg-present

skill · lijigang/ljg-skillsMIT licenceAudited 31 Oct 2026 · source 883e65587fb0

★ 7,598pushed todayversion 4.8.0
✕BLOCKGrade D · 69/100 · 1 finding · 883e655
7,598repo stars · whole lijigang/ljg-skills

Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit 883e65587fb0 and observed network and shell access and no hard-coded secrets. The audit raised 1 finding, 1 critical or high. What it does: Unix 气质的演讲设计与保真排版。把 Org/Markdown 提纲或经授权提炼的讲稿制成单文件离线 HTML;以语义角色选择巨句、对照、Unicode 关系图、证据与章节版式。默认深色,支持讲稿层、原生图表与翻页笔。USE WHEN present、做演讲、slides、按 outline 美化、把讲述精髓放上屏幕。NOT FOR 未经授权改写作者内容或生成企业 PPT。

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “ljg-present (lijigang/ljg-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/lijigang/ljg-present

Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 1 critical or high finding, starting with “Code injection” in Tools/ValidateDeck.ts:137. Do not install it without reading them.

Trust audit

Audit 0.4.1 · source read 31 Oct 2026

Trust score69/100✕BLOCK D
0 critical1 high0 medium0 low0 info

BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 721 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkDeclared3 observations
  • ShellDeclared1 observation
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeFAIL1
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (1)

HIGHCode injectioncode.eval_exec · Tools/ValidateDeck.ts:137
F-02 Code injectionCWE-78 · CWE-94 · CWE-95Layer L1
try{new Function(script);add('javascript-syntax',true,'Runtime compiles.');}catch(e){add('javascript-syntax',false,String(e));}
Why
evaluates text as code
Fix
remove; use a parser or a dispatch table

Audit 0.4.1 · source sha 883e65587fb0 · 31 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherlijigang GitHub userOwner of the repository this skill is read from
  • Source folderlijigang/ljg-skills/skills/ljg-presentThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict883e65587fb0A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Unix 气质的演讲设计与保真排版。把 Org/Markdown 提纲或经授权提炼的讲稿制成单文件离线 HTML;以语义角色选择巨句、对照、Unicode 关系图、证据与章节版式。默认深色,支持讲稿层、原生图表与翻页笔。USE WHEN present、做演讲、slides、按 outline 美化、把讲述精髓放上屏幕。NOT FOR 未经授权改写作者内容或生成企业 PPT。

---
name: ljg-present
description: "Unix 气质的演讲设计与保真排版。把 Org/Markdown 提纲或经授权提炼的讲稿制成单文件离线 HTML;以语义角色选择巨句、对照、Unicode 关系图、证据与章节版式。默认深色,支持讲稿层、原生图表与翻页笔。USE WHEN present、做演讲、slides、按 outline 美化、把讲述精髓放上屏幕。NOT FOR 未经授权改写作者内容或生成企业 PPT。"
user_invocable: true
version: "4.8.0"
---

# ljg-present:演讲铸造器

让观众一眼找到这一页的主角,让讲者有足够的提示继续展开。Unix 气质来自精确的关系、自然的文字、清楚的主次和有意保留的空白。

## Workflow Routing

| 工作 | 入口 |
|---|---|
| 生成、重排或改进演示 | [Workflows/Generate.md](Workflows/Generate.md) |

## Gotchas

- share、talk 等用途标签不决定颜色。未指定视觉主题时使用 hacker-dark。
- 两行可以是一个判断。role 由讲述功能决定;行数只参与字号与分页。
- 标题、主体、提示句不是必填三件套。主句已经完成表达时,让它独立站住。
- Unicode 连接线使用等宽网格,中文节点独立排版。不要把中文逐字塞进固定字符格。
- 静态通过不等于画面成立。构建工具固定模板;浏览器探针核对实际绘制的页面,截图另检视觉主次。

## 两种内容契约

| 模式 | 何时使用 | 保真对象 |
|---|---|---|
| faithful 保真排版 | 已有投影提纲;未授权改写 | 原文字句、顺序、表格、代码和源图 |
| editorial 演讲编排 | 用户已要求提炼讲稿、重组展示或重绘图 | 观点、证据、限定条件、数值和关系;上屏文字可在授权范围内改写 |

当前请求已授权的提炼或重绘直接执行,不重复询问。演讲编排记录 editingBasis,上屏内容以 sourceIds 回到完整来源;完整讲述放入 notes,按 N 查看。仅有「做成演示」不自动授权删改作者内容。

## 设计与实现

- 先读 [DesignSystem.md](DesignSystem.md),按相关版式查看 [CompositionReference.md](CompositionReference.md) 的实际样张。
- 数据契约见 [RenderingSpec.md](RenderingSpec.md);关系图、原生图表与源代码的边界见 [ChartSpec.md](ChartSpec.md)。
- 使用 Tools/BuildDeck.ts 把数据装入 SloganTemplate.html;不在产物末尾补 CSS,不另写渲染分支。
- 保留源中的章节转折与停顿。内容节点数、页数和图数都不是质量目标。
- 核心观点、重要限制和数据按投影距离保持可读;辅助信息退后或进入讲稿,不能缩小核心信息来制造留白。

## 主题

显式选择 > 明确的 theme_* 视觉标签 > hacker-dark。普通话题、用途标签不参与主题选择。

| 意图或参数 | theme |
|---|---|
| 默认、Unix、terminal、暗色 | hacker-dark |
| 浅色 Hacker、--hacker、兼容 --cyber | hacker |
| -b / --theme=black | black |
| -r / --theme=red | red |
| -y / --theme=yellow | yellow |

## 交付

一个 ~/Downloads/{title}.html,字体内嵌,图表内联,离线、零动效。→ ↓ Space Enter j PageDown 前进;← ↑ k PageUp 后退;Home/End 首末页;F 全屏;N 讲稿。滚动图形和讲稿时不触发翻页。

静态验证检查当前模板与源数据;使用 Interceptor 隔离浏览器加载 Tools/ProbeDeck.js,再看整套缩略图与代表页。隔离浏览器不可用时保留产物并如实报告未完成视觉复验,不改用主浏览器冒充验收。

## Examples

- 「按原提纲做演示,别改字」→ faithful,根据语义选版式,必要时沿源边界续页。
- 「把讲述精髓放进展示,供我现场展开」→ editorial,提炼主张、对照或关系,完整讲稿进入 notes。
- 「把旧 ASCII 图改成 Unicode」→ 记录重绘授权,以节点、连接和方向核对新图;真实代码仍逐字符保留。

Excerpt, first 2,023 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 883e655

git clone https://github.com/lijigang/ljg-skills
git -C ljg-skills checkout 883e65587fb0

The author documents no install command, so this uses the repository directly. Our verdict covers commit 883e65587fb0 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✕BLOCK D 69 / 100

    first audit · source 883e65587fb0

README badge

For maintainers · shows the latest audit

ModelsAtlas: BLOCK DMODELSATLASBLOCK · D
[![ModelsAtlas: BLOCK D](https://modelsatlas.com/skills/lijigang/ljg-present/badge.svg)](https://modelsatlas.com/skills/lijigang/ljg-present/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

Add this badge to your README

[![ModelsAtlas: BLOCK D](https://modelsatlas.com/skills/lijigang/ljg-present/badge.svg)](https://modelsatlas.com/skills/lijigang/ljg-present/)

Questions about ljg-present

Is ljg-present safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What can ljg-present access on my machine?
The audit observed that it reaches the network and runs shell commands. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does ljg-present work with?
Its documentation mentions cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (883e65587fb0), read on 2026-10-31. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.