Install
$ agentstack add skill-danielmedinac22-mirador-skill ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Mirador — share an HTML artifact
You publish HTML to the user's own Vercel project. The user already ran mirador init; everything you need is in their local Mirador home.
When to use
You just produced an HTML artifact (a report, deck, dashboard, document, prototype). Offer; never auto-run. Say something like "Want me to publish this and give you a link?" and wait for confirmation.
How the share flow works — follow exactly
1. Locate the user's Mirador home
Read the pointer file ~/.mirador-home if it exists; its contents are an absolute path. Otherwise use ~/.mirador/. Call this $ROOT.
Read $ROOT/config.json. If it doesn't exist, tell the user to run mirador init from a terminal first, then stop.
2. Identify the file
If the slash command provided an argument, use it. Otherwise look back in the current session for the most recently produced HTML file and offer it. Confirm if ambiguous.
3. Ask the user, in chat, respecting defaults from config.json
- slug (
name): suggest from the file's `` or filename. Validate: lowercase letters, digits, dashes only. - theme: list the themes under
$ROOT/themes/(each has ameta.json). Default isconfig.defaults.theme. Also offer+ generate from a reference…. - password:
- If
config.defaults.password_policy === 'never', do not ask. - If
'always-ask', ask the user yes/no. - If
'always-on', ask for the password (assume yes). - visibility: default
config.defaults.visibility. Only ask if you think the user might want to change it.
4. If the user wants to generate a theme
Ask them for one of:
- URL — fetch the page with
curl -s(or your equivalent), read any linked CSS, then write a CSS file under 4KB scoped under.mirador-content { ... }that visibly captures the typographic and color language. - Screenshot/image — examine the image and write the CSS.
- Description — write the CSS from the description.
Save the result to $ROOT/themes//:
meta.json:{ "name": "", "description": "...", "generated_from": { "type": "url"|"image"|"description", "ref": "..." }, "created_at": "" }theme.css: the CSS you wrote, scoped under.mirador-contenthead.html: any `/` tags the theme needs (e.g., Google Fonts). Empty if none.
Then use `` as the chosen theme.
5. Apply the theme to the user's HTML
Read the user's HTML. Then construct the themed HTML:
- If theme name is
none, skip steps 2–4. - Ensure a `
exists; if not, insert one right after(or wrap the whole content if there is no`). - Before `
, insert (in order): the contents of$ROOT/themes//head.html, then">+ the contents of$ROOT/themes//theme.css+`. - Wrap the `
content in.... If there's no, wrap everything betweenand`.
6. If a password was given, wrap with the gate
Write the themed HTML to a temp file. Then run:
node $ROOT/scripts/encrypt.mjs \
--in \
--out $ROOT/site/d//index.html \
--password "" \
--template $ROOT/templates/password-gate.html
The output is the gate page with ciphertext embedded.
7. Otherwise, write the themed HTML directly
mkdir -p $ROOT/site/d//
write themed HTML → $ROOT/site/d//index.html
write original HTML → $ROOT/site/d//original.html (verbatim, no theme)
8. Rebuild the public index if visibility=public
If the doc is public, regenerate $ROOT/site/index.html from $ROOT/templates/site-index.html:
- Replace
{{empty_or_list}}with empty string if there's at least one public doc; otherwise "No public docs yet." - Replace
{{list_html}}with/">...for each public doc in the config.
Otherwise leave the index alone.
9. Deploy
Run via shell:
vercel deploy --prod $ROOT/site --yes --no-clipboard
Capture stdout. The deployed URL is in there (https://...). If you can't parse it, use the fallback: https:///d//.
10. Update the config
Append a doc record to config.json's docs array:
{
"slug": "",
"title": " tag, or slug>",
"theme": "",
"passwordProtected": ,
"visibility": "",
"url": "",
"createdAt": ""
}
11. Log the deploy
Append a line to $ROOT/logs/deploys.log: \t\t\n.
12. Report
Print the URL to the user in chat with one line of confirmation, e.g.: > Published. https://mirador-danielm.vercel.app/d/q2/
When things go wrong
vercelnot found orvercel whoamifails → tell the user to runmirador config.$ROOT/config.jsonmissing → tell the user to runmirador init.- The user wants a feature this flow doesn't cover (multi-player, comments, edit-in-browser) → tell them honestly that the alpha doesn't have it; V1 will.
Don't
- Don't auto-run on every HTML file you produce — always offer first.
- Don't promise the password gate is real authentication. Tell the user it's a client-side gate, disuasive only.
- Don't invent themes outside
$ROOT/themes/; the directory is the source of truth. - Don't keep secrets in
config.json(passwords are never stored — onlypasswordProtected: true).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: danielmedinac22
- Source: danielmedinac22/mirador
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.