Token导航 LogoToken导航TokenDH.com
研究检索执行命令github未标认证来源可访问clear审计未展示

claude-command-authoringClaude command authoring 搜索

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

533

周安装

22

GitHub Stars

公开资料未说明

下载量

174
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

MIT

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:claude-command-authoring(Claude command authoring 搜索)
来源仓库:https://github.com/outfitter-dev/agents
仓库路径:skills/claude-command-authoring
安装命令:
npx skills add outfitter-dev/agents --skill "claude-command-authoring"
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

AgentSkills.tonpx skills
npx skills add outfitter-dev/agents --skill "claude-command-authoring"

简介

辅助安全审计与权限检查,识别凭据风险与漏洞。

  • 适合在 CI/CD 流程中嵌入安全检查步骤。
  • 安装命令:npx skills add outfitter-dev/agents --skill "claude-command-authoring"。
  • 不能将工具输出视为最终结论,需人工复核。
  • 原始 README 未提供常见误报处理建议。

SKILL.md

Claude Command Authoring

Create custom slash commands that extend Claude Code with reusable prompts and workflows.

Commands vs Skills

Critical distinction:

AspectCommands (This Skill)Skills
PurposeReusable prompts invoked by usersCapability packages auto-triggered
InvocationExplicit: /command-name argsAutomatic (model-triggered by context)
Locationcommands/ directoryskills/ directory with SKILL.md
StructureSingle .md fileDirectory with resources
Arguments$1, $2, $ARGUMENTSNo argument system

Commands are user-initiated. Skills are model-initiated.


Quick Start

Basic Command

Create .claude/commands/review.md:

---
description: Review code for best practices and issues
---

Review the following code for:
- Code quality and readability
- Potential bugs or edge cases
- Performance considerations
- Security concerns

Use with: /review

Command with Arguments

Create .claude/commands/fix-issue.md:

---
description: Fix a specific GitHub issue
argument-hint: <issue-number>
---

Fix issue #$1 following our coding standards.
Review the issue, implement a fix, add tests, and create a commit.

Use with: /fix-issue 123

Command with Context

Create .claude/commands/commit.md:

---
description: Create git commit from staged changes
allowed-tools: Bash(git *)
---

## Context

Current branch: !`git branch --show-current`
Staged changes: !`git diff --staged`
Recent commits: !`git log --oneline -5`

## Task

Create a commit with a clear message based on the staged changes.

Use with: /commit


Workflow Overview

  1. Discovery - Define purpose, scope, and target users
  2. Design - Choose features and configuration
  3. Implementation - Write frontmatter and content
  4. Validation - Verify against quality standards

Phase 1: Discovery

Before writing code, clarify:

  • Purpose: What task does this command automate?
  • Scope: Project-specific or personal workflow?
  • Arguments: What inputs does it need?
  • Tools: What operations will it perform?

Key questions:

  • Will this be shared with the team (project) or personal use?
  • Does it require bash execution or file references?
  • Should tool access be restricted for safety?

Phase 2: Design

Command Scopes

ScopeLocationVisibilityUse Case
Project.claude/commands/Team via gitShared workflows
Personal~/.claude/commands/You onlyIndividual preferences
Plugin<plugin>/commands/Plugin usersDistributed via marketplace

Project commands show "(project)" in /help. Personal show "(user)".

Core Features

FeatureSyntaxPurpose
Arguments$1, $2, $ARGUMENTSDynamic input from user
Bash execution!backtickcommandbacktickInclude shell output in context
File references@path/to/fileInclude file contents
Tool restrictionsallowed-tools:Limit Claude's capabilities

Frontmatter Schema

---
description: Brief description for /help      # Required for discovery
argument-hint: <required> [optional]          # Shown in autocomplete
allowed-tools: Read, Grep, Bash(git *)        # Restrict tool access
model: claude-3-5-haiku-20241022             # Override model
disable-model-invocation: true                # Prevent SlashCommand tool
---

See frontmatter.md for complete schema.


Phase 3: Implementation

File Structure

---
description: Deploy to environment with validation
argument-hint: <environment> [--skip-tests]
allowed-tools: Bash(*), Read
---

# Deployment

Target: $1
Options: $2

## Pre-flight Checks

Environment: !`echo "$1" | grep -E "^(staging|production)$" || echo "Invalid"`
Tests: !`[[ "$2" == *"--skip-tests"* ]] && echo "Skipped" || bun test`

## Task

Based on validation above, proceed with deployment or explain issues.

Argument Patterns

Positional arguments ($1, $2, $3):

Compare file $1 with file $2 and summarize differences.

Usage: /compare old.ts new.ts

All arguments ($ARGUMENTS):

Fix the following issues: $ARGUMENTS

Usage: /fix memory leak in auth slow query in search

Combined with file references:

Analyze this file: @$1

Usage: /analyze src/main.ts

See arguments.md for advanced patterns.

Bash Execution

Execute commands and include output:

## Git Context
Branch: !`git branch --show-current`
Status: !`git status --short`
Diff: !`git diff --stat`

Based on the above, suggest next steps.

Important: Output is truncated at 15,000 characters by default. Use SLASH_COMMAND_TOOL_CHAR_BUDGET to adjust.

See bash-execution.md for patterns.

File References

Include file contents directly:

Review this configuration:
- Package: @package.json
- TypeScript: @tsconfig.json
- User input: @$1

See file-references.md for details.

Tool Permissions

Restrict what Claude can do:

# Read-only analysis
allowed-tools: Read, Grep, Glob

# Git operations only
allowed-tools: Bash(git *), Read

# Full bash with restrictions
allowed-tools: Bash(bun *), Bash(npm *), Read, Write, Edit

See permissions.md for patterns.


Phase 4: Validation

After creating a command, validate against these checklists.

Frontmatter Checks

  • Opens with --- on line 1, closes with ---
  • description present and action-oriented
  • argument-hint uses <required> and [optional] syntax
  • allowed-tools uses correct names (case-sensitive)
  • Uses spaces (not tabs) for indentation

Naming Conventions

  • Kebab-case filename: my-command.md
  • No spaces or special characters
  • Action-oriented: verb-noun pattern preferred
  • Concise: 1-3 words

Good: review-pr.md, deploy-staging.md, fix-issue.md Bad: my command.md, DoStuff.md, helper.md

Description Quality

  • Action-oriented (starts with verb)
  • Specific about what it does
  • Under 80 characters
  • Helpful for /help discovery

Good: "Deploy to staging with health checks and Slack notification" Bad: "Deploy stuff" or "Helps with deployment"

Content Quality

  • Clear instructions for Claude
  • Proper argument handling if used
  • Bash commands validated (test in terminal first)
  • File paths relative to project root
  • Error handling for edge cases

Validation Report Format

# Command Validation: [command-name]

## Summary
- **Status**: PASS | FAIL | WARNINGS
- **Location**: [path]
- **Issues**: [count]

## Critical Issues (must fix)
1. [Issue with fix]

## Warnings (should fix)
1. [Issue with fix]

## Strengths
- [What's done well]

Namespacing

Organize commands in subdirectories:

.claude/commands/
+-- frontend/
|   +-- component.md      # /component (project:frontend)
|   +-- styling.md        # /styling (project:frontend)
+-- backend/
|   +-- migration.md      # /migration (project:backend)
+-- review.md             # /review (project)

The namespace appears in /help but commands are invoked without prefix: /component or /frontend/component.

See namespacing.md for organization patterns.


Testing Commands

  1. Create the command file
  2. Verify with /help - should see your command listed
  3. Test basic invocation: /your-command
  4. Test with arguments: /your-command arg1 arg2
  5. Verify tool restrictions if using allowed-tools

Debug Mode

claude --debug

Shows command loading and execution details.


Troubleshooting

Command Not Found

  • Verify file location: .claude/commands/name.md
  • Check filename: lowercase, .md extension, no spaces
  • Restart Claude Code or use /clear

Arguments Not Working

  • Use $1, $2 not {1}, {2}
  • Use $ARGUMENTS for all arguments
  • Quote arguments with spaces: /cmd "arg with spaces"

Bash Commands Failing

  • Use ! before backticks: `!command `
  • Test command in terminal first
  • Check output length (15k char limit)
  • Verify allowed-tools includes Bash

Tool Restrictions Not Applied

  • Check YAML syntax (no tabs, proper quoting)
  • Tool names are case-sensitive: Read not read
  • Use wildcards for bash: Bash(git *)

References

ReferenceContent
frontmatter.mdComplete frontmatter schema and fields
arguments.mdArgument handling and patterns
bash-execution.mdShell command execution
file-references.mdFile inclusion syntax
permissions.mdTool restriction patterns
namespacing.mdDirectory organization
sdk-integration.mdAgent SDK usage
community.mdCommunity examples and resources

See EXAMPLES.md for complete real-world examples. See scripts/ for scaffolding and validation utilities.


Related Skills

  • claude-hook-authoring: Add automation triggers to command workflows
  • claude-plugin-development: Bundle commands into distributable plugins
  • claude-code-configuration: Configure Claude Code settings globally

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

04

需要参考平台分布和安装热度时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

补充不同宿主或平台的使用分布数据

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Claude Code

28.46%
按下载量换算50

windsurf

26.34%
按下载量换算46

trae

18.48%
按下载量换算32

OpenCode

11.82%
按下载量换算21

Cursor

7.95%
按下载量换算14

Codex

3.85%
按下载量换算7

安全审计

暂无安全审计结果可展示。

权限和风险

执行命令

安装流程涉及命令执行,可能通过 npx skills add outfitter-dev/agents --skill "claude-command-authoring" 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills