Agent助手
- 作者仓库星标 0
- 作者更新于 实时读取
- 作者仓库 skills-registry
- 领域
- 安全
- 兼容 Agent
-
- Claude Code
- Cursor
- Cline
- Codex
- Windsurf
- Gemini CLI
- +20
- 信任分
- 88 / 100 · 社区维护
- 作者 / 版本 / 许可
- @tomevault-io · 未声明 license
- Token 消耗评级
- 低消耗
- 接入复杂程度
- 即装即用
- 是否需要外部 API Key
- 不需要
- 兼容的系统
- 未声明(默认跨平台)
- 底层运行要求
- 无特殊要求
- 文件与系统权限
-
- 只读
- 允许写入 / 修改
- 网络行为
- 仅限本地
- 安装命令数
- 26 条
档案由构建时根据 SKILL.md 与安装命令自动衍生,可能与作者实际意图存在差异。
需要注意: 未限定 allowed-tools,默认拥有全部工具权限。
---
name: agent-definition-auditor
description: Audit and score an agent-definition markdown such as `AGENTS.md`, `CLAUDE.md`, `SKILL.md`, `SOUL…
category: 安全
runtime: 无特殊运行时
---
# agent-definition-auditor 输出预览
## PART A: 任务判断
- 适用问题:安全审计、密钥扫描、权限检查或风险分析。
- 输入要求:目标材料、限制条件、期望输出和验收方式。
- 证据边界:围绕“When to use / When not to use / Non-negotiables”读取原文规则,不把推断写成作者承诺。
## PART B: 执行结果
- **01** 任务判断:确认你的需求是否属于安全审计、密钥扫描、权限检查或风险分析,并标出输入、限制和预期结果。
- **02** 执行计划:优先按“When to use / When not to use / Non-negotiables”拆成步骤,说明每一步会读取什么、修改什么、产出什么。
- **03** 交付结果:给出可复制的命令、文件改动、检查清单或内容草稿,并说明如何继续迭代。
- **04** 风险边界:结合 读取文件、写入/修改文件、主要在本地完成、通常不需要额外 API Key 给出执行前确认项。
## Running Rules
- 读取文件、写入/修改文件;主要在本地完成;通常不需要额外 API Key。
- 先小样例验证,再放大到真实任务。
- 交付时同时给结果、检查口径和下一步迭代建议。 先确认触发方式
原文没有稳定的斜杠命令要求。安装验证后通常全局生效,直接在对话里点名这个 Skill 并描述任务即可。
给清楚输入和边界
告诉 Agent 目标文件或材料、期望结果、不可改范围、是否允许联网或执行命令。本 Skill 的权限画像是:读取文件、写入/修改文件。
小样例验证后再放大
先用一个小任务确认它会围绕“When to use / When not to use / Non-negotiables”工作;涉及文件或命令时,先看 diff、日志、预览或测试结果。
复核后再交付
检查最终产物是否包含明确结果、必要证据和下一步动作;如果输出泛泛而谈,就补充输入、边界和验收标准后重跑。
---
name: agent-definition-auditor
description: Audit and score an agent-definition markdown such as `AGENTS.md`, `CLAUDE.md`, `SKILL.md`, `SOUL…
category: 安全
source: tomevault-io/skills-registry
---
# agent-definition-auditor
## 什么时候使用
- 用于审阅代码、文档或方案并给出可执行反馈 适合处理安全审计、密钥扫描、权限检查和风险分析,核心价值是把输入、判断、执行、验证和交付边界固定下来,避免 Agent 泛泛回答。 把任务拆成可执行、可检查、可继续迭代的步骤;通常不需要额外 A…
- 面向安全审计、密钥扫描、权限检查或风险分析,优先处理能明确输入、步骤和验收标准的工作。
## 需要提供什么
- 目标材料、目录范围、期望结果和不可改动内容。
- 是否允许联网、执行命令、读写文件或调用外部服务。
## 执行规则
- 围绕「When to use / When not to use / Non-negotiables」组织步骤,不把推断写成作者事实。
- 读取文件、写入/修改文件;主要在本地完成;通常不需要额外 API Key。
- 先跑小样例,确认结果可检查后再扩大任务范围。
## 输出要求
- 给出最终产物、关键证据、验证方式和下一步动作。
- 信息不足时标记 unknown,不编造命令、平台或依赖。 证据边界与执行链路
作者原文负责流程事实;仓库文件负责来源和命令;流狐只补充适用场景、限制和质量判断。
skill "agent-definition-auditor" {
输入层 -> 用户目标 + 目标文件 + 禁止范围 + 验收标准
上下文层 -> When to use / When not to use / Non-negotiables
规则层 -> SKILL.md 触发条件 / 执行顺序 / 输出格式
运行层 -> 无特殊运行时 | 读取文件、写入/修改文件 | 主要在本地完成
安全层 -> 通常不需要额外 API Key + 小任务验证 + diff / 日志复核
输出层 -> 可复制结果 + 检查清单 + 下一步迭代
} Agent Definition Auditor
Use this skill when the job is auditing one agent-definition file, not rewriting it.
When to use
- The user wants to audit or score an
AGENTS.md,CLAUDE.md,SKILL.md,SOUL.md,.cursorrules, system prompt, or other agent-definition markdown. - The user wants a cold-reader review of agent-contract quality.
- The user wants a deploy / revise / do-not-ship judgment with concrete findings and fastest improvements.
- The user wants a reusable rubric-based critique of an agent instruction file rather than an output benchmark.
When not to use
- The user wants to write, rewrite, or refactor the agent file rather than score it.
- The user wants to evaluate agent outputs, benchmark runtime behavior, or compare model responses rather than audit the instruction artifact itself.
- The job is code review, product-doc review, or general technical writing feedback unrelated to an agent-definition file.
- No target artifact or pasted instruction text is available.
Non-negotiables
- Default to a single-artifact, read-only cold read.
- Judge the document as an operational contract, not as domain strategy or business policy.
- Distinguish precise layered contracts from phantom context.
- Apply the scoring model, hard caps, and report shape from the reference prompt literally.
- Cite line numbers when available; otherwise cite exact headings or short anchors.
- Do not widen to repo-wide inspection unless the user explicitly asks for multi-file or repo-context evaluation.
- Do not rewrite the file unless the user explicitly asks for fixes after the audit.
First move
- Resolve one target artifact path or pasted instruction text.
- Read
references/agent-definition-judge-prompt.md. - Read the full target artifact once before scoring.
- If the user also wants revisions, finish the audit first unless they explicitly want authoring instead of judging.
Workflow
- Confirm the artifact class and whether the input is a full file or an excerpt.
- Stay on the single document by default.
- Inventory the artifact's hard rules:
- mission and scope
- output rules
- tool rules
- approval and escalation rules
- failure handling
- external dependencies
- Apply the reference prompt's scoring model and hard caps.
- Return the exact report sections required by the reference prompt.
- If the user then wants fixes, use the audit as the basis for the follow-up instead of recomputing the diagnosis from scratch.
Output expectations
- Return the exact top-level sections from the reference prompt.
- Include overall and uncapped score, verdict, confidence, cap logic, findings, strengths, fastest score gains, and limits.
- Keep findings ordered by severity and tied to concrete evidence from the artifact.
Reference map
references/agent-definition-judge-prompt.md- full judging prompt, scoring model, hard caps, report contract, and examples
Source: aelaguiz/arch_skill — distributed by TomeVault.
先判断是否适合
作者设计意图
作者的方法与取舍
边界和复核