القائمة
Markdown/HTML rendering in the AMC web repo — always go through the MarkdownText component (marked + dompurify); never render unsanitized HTML. Read before displaying markdown or remote HTML.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
The pakop C#/.NET WASM module (CUE4Parse-based) — what it does (pak-file inspection/hashing), how to build it (pnpm build:pakop), and how to consume it (lazy dynamic import). Read before touching wasm/pakop or the pak routes.
How to fetch data in the AMC web app — the apiClient helper, visibility-aware polling / EventSource / WebSocket wrappers in src/lib/api/_api.ts, per-domain API modules, and protobuf decoding. Read before adding any network call.
The AMC app shell — hooks.server.ts prerender-time head injection (SEO meta, theme-color, font preloads, icons), hooks.ts URL delocalization, and asset import suffixes (?no-inline, ?url). Read before changing global head tags, fonts, SEO metadata, or hooks.
High-level architecture of the AMC web app — SvelteKit static/SPA hybrid, Vite plugin pipeline, i18n strategy, WASM modules, dev-server proxies. Read before making structural or build-related changes.
Utility function conventions in the AMC web repo — es-toolkit for lodash-like helpers (lodash-es was removed), but check src/lib/utils first. Read before adding utility helpers.
Import path aliases ($lib, $messages) and workspace packages used in the AMC web repo. Read when writing imports or resolving where a module comes from.
| name | markdown-rendering |
| description | Markdown/HTML rendering in the AMC web repo — always go through the MarkdownText component (marked + dompurify); never render unsanitized HTML. Read before displaying markdown or remote HTML. |
src/lib/ui/MarkdownText/MarkdownText.svelte, which parses with marked and sanitizes with dompurify.{@html …} with user-supplied or remote content outside this component — that's an XSS hole. If you need new rendering behavior, extend MarkdownText, don't bypass it.Related: [[codebase-patterns]], [[project-structure]]