Token导航 LogoToken导航TokenDH.com
研究检索external-servicegithub未标认证来源可访问clear审计未展示

skill-authoring技能创作

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

324

周安装

13

GitHub Stars

公开资料未说明

下载量

105
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

MIT

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:skill-authoring(技能创作)
来源仓库:https://github.com/5dlabs/cto
仓库路径:skills/skill-authoring
安装命令:
npx skills add 5dlabs/cto --skill "skill-authoring"
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

AgentSkills.tonpx skills
npx skills add 5dlabs/cto --skill "skill-authoring"

简介

用于辅助安全审计、权限检查、凭据风险和认证流程分析。

  • 适合梳理敏感配置、检查依赖风险或生成安全复核清单。
  • 不能把工具输出直接当最终结论;涉及密钥或生产系统时应先确认最小权限与脱敏方式。
  • 安装命令:npx skills add 5dlabs/cto --skill "skill-authoring",来源仓库:https://github.com/5dlabs/cto/tree/main/skills/skill-authoring。
  • 建议确认权限范围和维护状态,涉及敏感数据时注意操作边界。

SKILL.md

Skill Authoring Guide

Core Principle: Context Window is a Public Good

The context window is shared across system prompts, conversation history, skill metadata, and user requests. Challenge each piece of information:

  • "Does Claude really need this explanation?"
  • "Does this paragraph justify its token cost?"

Default assumption: Claude is already very smart. Only add context Claude doesn't already have. Prefer concise examples over verbose explanations.

Progressive Disclosure

Skills use three-level loading to manage context efficiently:

LevelWhen LoadedTarget SizeContains
MetadataAlways in context~100 wordsname + description in frontmatter
SKILL.md bodyWhen skill triggers<5k wordsCore instructions, workflow
Bundled resourcesAs needed by ClaudeUnlimitedScripts, references, assets

Implications

  • Frontmatter is critical: The description field is the primary trigger mechanism
  • Body is conditional: Only loaded after triggering - don't put "when to use" info here
  • References defer complexity: Move detailed patterns to references/ subdirectory

Degrees of Freedom

Match instruction specificity to task fragility and variability:

FreedomWhen to UseFormat
HighMultiple approaches valid, context-dependent decisionsText-based instructions
MediumPreferred pattern exists, some variation acceptablePseudocode or scripts with parameters
LowOperations fragile/error-prone, consistency criticalSpecific scripts, few parameters

Think of Claude exploring a path: a narrow bridge with cliffs needs specific guardrails (low freedom), while an open field allows many routes (high freedom).

Skill Anatomy

skill-name/
├── SKILL.md (required)
│   ├── YAML frontmatter (name + description only)
│   └── Markdown instructions
└── Optional Resources/
    ├── references/     # Documentation loaded into context as needed
    ├── scripts/        # Executable code for deterministic operations
    └── assets/         # Files used in output (templates, icons, fonts)

Frontmatter Rules

---
name: skill-name
description: |
  What the skill does AND when to use it.
  Include trigger keywords. Be comprehensive.
  Example: "Create MCP servers for API integrations.
  Use when building tools for external services,
  implementing Model Context Protocol servers,
  or integrating APIs into agent workflows."
---
  • Only name and description - No other fields
  • Description is the trigger - Include all "when to use" information here
  • Be specific about triggers - List contexts, keywords, and scenarios

SKILL.md Body Guidelines

  • Under 500 lines - Split to references/ when approaching limit
  • No "When to Use" sections - That info belongs in frontmatter description
  • Progressive detail - Start with quick overview, link to references for depth
  • Imperative form - Use "Create X" not "You should create X"

References Directory

For skills with multiple variants, frameworks, or detailed patterns:

cloud-deploy/
├── SKILL.md (workflow + selection guidance)
└── references/
    ├── aws.md      # AWS-specific patterns
    ├── gcp.md      # GCP-specific patterns
    └── azure.md    # Azure-specific patterns

When user chooses AWS, Claude only reads aws.md - not all variants.

Scripts Directory

Include executable scripts when:

  • Same code is rewritten repeatedly
  • Deterministic reliability is required
  • Operations are complex but mechanical
# scripts/validate_schema.py
# Can be executed without reading into context
# Use --help pattern for black-box usage

Anti-Patterns

❌ Don't Create

  • README.md, INSTALLATION_GUIDE.md, CHANGELOG.md
  • User-facing documentation (skills are for agents)
  • Setup/testing procedures
  • Deeply nested reference structures (keep one level deep)

❌ Don't Include

  • Information Claude already knows (common libraries, basic syntax)
  • Redundant explanations (say it once, well)
  • Verbose variable names in examples
  • Unnecessary print statements in code examples

Writing Guidelines

Be Concise

❌ "In order to accomplish this task, you will need to first..."
✅ "First, create the configuration file:"

Use Tables for Structured Info

❌ "Use X for case A. Use Y for case B. Use Z for case C."
✅ | Case | Tool |
   |------|------|
   | A    | X    |
   | B    | Y    |
   | C    | Z    |

Provide Minimal Examples

❌ A 50-line example showing every possible option
✅ A 10-line example showing the core pattern

Quality Checklist

Before finalizing a skill:

  • Frontmatter description covers all trigger scenarios
  • SKILL.md body is under 500 lines
  • No redundancy with Claude's base knowledge
  • Progressive disclosure - detailed info in references/
  • Degrees of freedom match task fragility
  • No extra files (README, CHANGELOG, etc.)
  • Examples are minimal but complete

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

04

需要参考平台分布和安装热度时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

补充不同宿主或平台的使用分布数据

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Claude Code

28.25%
按下载量换算30

windsurf

23.68%
按下载量换算25

trae

20.54%
按下载量换算22

OpenCode

14.05%
按下载量换算15

Codex

8.39%
按下载量换算9

Antigravity

3.77%
按下载量换算4

安全审计

暂无安全审计结果可展示。

权限和风险

external-service

该 Skill 可能调用第三方服务、云服务或外部模型 API,使用前需要确认账号、额度、数据发送范围和服务条款。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills