安全审计
- 作者仓库星标 4,578
- 作者更新于 实时读取
- 作者仓库 docs
- 领域
- 安全
- 兼容 Agent
-
- Claude Code
- Cursor
- Cline
- Codex
- Windsurf
- Gemini CLI
- +20
- 信任分
- 88 / 100 · 社区维护
- 作者 / 版本 / 许可
- @docker · 未声明 license
- Token 消耗评级
- 低消耗
- 接入复杂程度
- 需手动接入
- 是否需要外部 API Key
- 不需要
- 兼容的系统
- Docker
- 底层运行要求
- Docker
- 文件与系统权限
-
- 只读
- Shell 执行
- 允许写入 / 修改
- 网络行为
- 允许外网请求
- 安装命令数
- 26 条
档案由构建时根据 SKILL.md 与安装命令自动衍生,可能与作者实际意图存在差异。
需要注意: 未限定 allowed-tools,默认拥有全部工具权限。
---
name: agent-readiness-audit
description: > Audit the live site, not the source tree alone. Prefer the same fetch path an external agent w…
category: 安全
runtime: Docker
---
# agent-readiness-audit 输出预览
## PART A: 任务判断
- 适用问题:安全审计、密钥扫描、权限检查或风险分析。
- 输入要求:目标材料、限制条件、期望输出和验收方式。
- 证据边界:围绕“1. Set scope / 2. Gather sitewide signals / 3. Sample representative pages”读取原文规则,不把推断写成作者承诺。
## PART B: 执行结果
- **01** 任务判断:确认你的需求是否属于安全审计、密钥扫描、权限检查或风险分析,并标出输入、限制和预期结果。
- **02** 执行计划:优先按“1. Set scope / 2. Gather sitewide signals / 3. Sample representative pages”拆成步骤,说明每一步会读取什么、修改什么、产出什么。
- **03** 交付结果:给出可复制的命令、文件改动、检查清单或内容草稿,并说明如何继续迭代。
- **04** 风险边界:结合 读取文件、执行终端命令、写入/修改文件、会按任务需要访问外部网络、通常不需要额外 API Key 给出执行前确认项。
## Running Rules
- 读取文件、执行终端命令、写入/修改文件;会按任务需要访问外部网络;通常不需要额外 API Key。
- 先小样例验证,再放大到真实任务。
- 交付时同时给结果、检查口径和下一步迭代建议。 原文出现了 `/llms`、`/llms-full`、`/robots`、`/sitemap` 这类斜杠命令;如果你的 Agent 支持命令触发,优先用命令开场,再补充目标和边界。
告诉 Agent 目标文件或材料、期望结果、不可改范围、是否允许联网或执行命令。本 Skill 的权限画像是:读取文件、执行终端命令、写入/修改文件。
先用一个小任务确认它会围绕“1. Set scope / 2. Gather sitewide signals / 3. Sample representative pages”工作;涉及文件或命令时,先看 diff、日志、预览或测试结果。
检查最终产物是否包含明确结果、必要证据和下一步动作;如果输出泛泛而谈,就补充输入、边界和验收标准后重跑。
---
name: agent-readiness-audit
description: > Audit the live site, not the source tree alone. Prefer the same fetch path an external agent w…
category: 安全
source: docker/docs
---
# agent-readiness-audit
## 什么时候使用
- 把安全方向的常用动作沉淀成 Agent 可调用的技能 适合处理安全审计、密钥扫描、权限检查和风险分析,核心价值是把输入、判断、执行、验证和交付边界固定下来,避免 Agent 泛泛回答。 把任务拆成可执行、可检查、可继续迭代的步骤;通常不…
- 面向安全审计、密钥扫描、权限检查或风险分析,优先处理能明确输入、步骤和验收标准的工作。
## 需要提供什么
- 目标材料、目录范围、期望结果和不可改动内容。
- 是否允许联网、执行命令、读写文件或调用外部服务。
## 执行规则
- 围绕「1. Set scope / 2. Gather sitewide signals / 3. Sample representative pages」组织步骤,不把推断写成作者事实。
- 读取文件、执行终端命令、写入/修改文件;会按任务需要访问外部网络;通常不需要额外 API Key。
- 先跑小样例,确认结果可检查后再扩大任务范围。
## 输出要求
- 给出最终产物、关键证据、验证方式和下一步动作。
- 信息不足时标记 unknown,不编造命令、平台或依赖。 作者原文负责流程事实;仓库文件负责来源和命令;流狐只补充适用场景、限制和质量判断。
skill "agent-readiness-audit" {
输入层 -> 用户目标 + 目标文件 + 禁止范围 + 验收标准
上下文层 -> 1. Set scope / 2. Gather sitewide signals / 3. Sample representative pages
规则层 -> SKILL.md 触发条件 / 执行顺序 / 输出格式
运行层 -> Docker | 读取文件、执行终端命令、写入/修改文件 | 会按任务需要访问外部网络
安全层 -> 通常不需要额外 API Key + 小任务验证 + diff / 日志复核
输出层 -> 可复制结果 + 检查清单 + 下一步迭代
} Agent Readiness Audit
Audit the live site, not the source tree alone. Prefer the same fetch path an external agent would use in the wild: direct HTTP requests, sitemap sampling, and page-level inspection.
Do not reduce the result to a homepage-only scan or a binary checklist.
1. Set scope
Use $ARGUMENTS as the base URL when provided. Otherwise infer the base
URL from context and state the assumption.
Decide whether the host being audited is:
- a docs-only host
- an app/tool host
- a mixed host
This matters for optional checks such as MCP, plugin manifests, or other tool discovery files. Do not penalize a docs-only host for missing tooling manifests that belong on a separate service.
For docs.docker.com, treat the public docs host as docs-only. Docker's
MCP server is published separately, so missing MCP files on the docs host
should be reported as N/A, not as a failure.
2. Gather sitewide signals
Always check these resources first:
/llms.txt/llms-full.txt/robots.txt/sitemap.xml
Only check host-level tool manifests when the host is an app/tool host, mixed host, or explicitly advertises them:
/.well-known/ai-plugin.json/.well-known/agent.json/.well-known/agents.json
Use the bundled script for a baseline:
bash .agents/skills/agent-readiness-audit/scripts/baseline-probes.sh \
"$ARGUMENTS"
The script produces baseline evidence only. You still need to interpret what matters for a docs property and score it with the rubric.
For docs-only hosts, you may skip tool-manifest probes to reduce noise:
CHECK_TOOL_MANIFESTS=0 \
bash .agents/skills/agent-readiness-audit/scripts/baseline-probes.sh \
"$ARGUMENTS"
3. Sample representative pages
Use the sitemap when available. Do not rely on the homepage alone.
If llms.txt exists, sample some URLs from it as well. This helps catch
stale or misleading discovery surfaces that a sitemap-only sample would miss.
Sample at least 12 pages when the site is large enough, and cover multiple page types:
- homepage or docs landing page
- section landing pages
- task guides
- product manuals
- reference or API pages
- tutorial or learning pages
If the sitemap is missing or unusable, discover pages through internal links and note the lower confidence.
If the site has distinct delivery patterns, sample each one. For example:
- normal content pages
- generated reference pages
- versioned docs
- localized docs
4. Run fetch-path checks on each sample
For each sampled page, verify:
- HTML fetch status, content type, and final URL
Accept: text/markdownbehavior- direct markdown route behavior such as
<page>.mdor another stable path - page-level markdown alternate links and whether they actually resolve
- whether page actions such as "Open Markdown" agree with the working route
- whether the HTML title or H1 matches the markdown H1 closely enough for retrieval parity
- whether main content is present in the initial HTML
- redirect chain length and canonical URL consistency
- obvious chrome/noise in the markdown response
Do not assume a .md mirror exists just because another site uses one.
Verify the actual markdown path the site exposes.
Treat these as separate signals:
- negotiated markdown works
- a stable direct markdown URL works
- the page advertises the correct markdown URL
If the page advertises dead markdown alternates but a working markdown route exists, do not fail markdown delivery outright. Score it as a discoverability and consistency problem instead.
For API or generated reference pages, also verify whether a machine-readable asset such as OpenAPI YAML is directly linked and fetchable.
5. Judge structure and legibility
Measure structural signals:
- exactly one
h1 - sane heading hierarchy
mainandarticlepresence where appropriate- canonical tags
- JSON-LD or breadcrumb structured data
- stable anchors and deep-linkable headings
Also make a qualitative judgment about agent legibility:
- markdown strips site chrome cleanly
- headings are specific and task-oriented
- code blocks stay intelligible without client-side JS
- the page is not dominated by banners, injected chat, or nav noise
Measure code block labeling explicitly when code samples are common. A page type with many untagged fenced blocks should lose points even if the prose is otherwise clean.
For page types that intentionally render interactive UIs with JavaScript, judge them separately from normal docs pages. If the HTML shell is thin, check whether the page still provides:
- a fetchable markdown summary
- a directly linked machine-readable asset
- a usable non-JS fallback
6. Score with the rubric
Use references/rubric.md.
Rules:
- score only what you verified
- mark non-applicable checks as
N/A - normalize the final score against applicable points only
- do not let optional manifest checks dominate the grade
Apply the foundational caps from the rubric. A site with broken discovery or broken markdown delivery should not earn a high grade because it has clean metadata.
Do not average away a weak page type. If one major page type, such as API reference, is materially worse than the rest of the corpus, call it out as the weakest segment and reflect it in the category notes.
7. Compare with external scanners when useful
If external scanner results are available, compare them to your live findings. Treat them as secondary evidence.
If a scanner and the live fetch disagree:
- trust the live fetch
- report the mismatch explicitly
- explain whether the scanner is testing a different assumption
8. Produce a remediation list
Turn findings into a short backlog:
P0: fetchability or discovery blockersP1: recurring structural or parity issuesP2: polish, optional manifests, or low-impact enhancements
For each remediation, include:
- the failing signal
- why it matters to agents
- a concrete fix
- whether it is sitewide or page-type-specific
9. Report in a stable format
Use references/report-template.md.
Always include:
- overall score and grade
- confidence level
- sampled URLs or sample strategy
- category scores
- highest-priority findings
- remediation backlog
Notes
- Favor docs-delivery checks over marketing-site heuristics.
- Do not fail a docs host for lacking MCP or plugin manifests unless the host itself is meant to expose tools.
- Treat raw byte size as supporting evidence, not as a primary scoring input.
- Prefer short evidence excerpts and commands over long copied page text.
先判断是否适合
作者设计意图
作者的方法与取舍
边界和复核