Token导航 LogoToken导航TokenDH.com
研究检索external-servicegithub未标认证来源可访问clear审计通过

claude-md-authoringClaude MD authoring 搜索

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

930

周安装

38

GitHub Stars

35

下载量

301
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

3

许可证

MIT

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:claude-md-authoring(Claude MD authoring 搜索)
来源仓库:https://github.com/ratacat/claude-skills
仓库路径:skills/claude-md-authoring
安装命令:
npx skills add https://github.com/ratacat/claude-skills --skill claude-md-authoring
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。不同来源提供的安装方式可能略有差异;本站展示可直接复制的安装命令,安装前请核对来源页面。

skills.shnpx skills
npx skills add https://github.com/ratacat/claude-skills --skill claude-md-authoring

简介

claude-md-authoring 指导创建高效的 CLAUDE.md 项目上下文文件。

  • 适合在 Codex、Claude、Cursor、Gemini CLI 中优化 AI 工作流配置。
  • 通过 GitHub 仓库安装,采用 WHAT/WHY/HOW 框架组织内容。
  • 建议控制在 50-100 行以内以保持 token 效率。
  • 注意避免将风格规则写入文件而应依赖工具链处理。

SKILL.md

CLAUDE.md Authoring

Quickstart

  1. Determine scope: User-level (~/.claude/) or project-level (.claude/)?
  2. Apply WHAT/WHY/HOW framework (project-level only)
  3. Keep instructions under budget: ~50 for user-level, ~100 for project-level
  4. Never use Claude as a linter: Style rules belong in tooling, not CLAUDE.md
  5. Validate with quality checklist before finalizing

Core Principle

"The only thing that the model knows about your codebase is the tokens you put into it."

CLAUDE.md is the highest-leverage point for context transfer. Every instruction competes for limited attention. Include only what Claude cannot infer and must apply universally.

Scope Decision

User-Level (~/.claude/CLAUDE.md)

Applies to ALL projects. Include only:

  • Personal working style preferences
  • Relationship dynamics (pushback, honesty, communication)
  • Universal philosophy (YAGNI, root-cause debugging)
  • Proactiveness boundaries

Never include:

  • Project-specific commands (build, test, lint)
  • Tech stack details
  • Style rules that vary by project
  • Tool/framework references that don't exist everywhere

Project-Level (.claude/CLAUDE.md)

Applies to ONE project. Use the WHAT/WHY/HOW framework:

WHAT (2-5 lines)

  • Project purpose in one sentence
  • Primary language/framework
  • Key directories and their purposes

WHY (optional, 2-3 lines)

  • Non-obvious architectural decisions
  • Constraints that affect implementation choices

HOW (3-7 lines)

  • Essential commands: build, test, lint, run
  • Any project-specific workflows
  • Where to find more documentation

Instruction Budget

LLMs reliably follow ~150-200 instructions. Claude Code's system prompt uses ~50, leaving limited budget.

ScopeTargetMaximum
User-level~30-4060
Project-level~50-80120
Combined~80-120150

Counting instructions: Each actionable directive counts as one instruction.

  • "NEVER skip tests" = 1 instruction
  • "Use TypeScript for new files" = 1 instruction
  • A 5-item list = 5 instructions

Anti-Pattern: Claude as Linter

Never rely on Claude for style enforcement:

  • Naming conventions with specific examples
  • Comment formatting rules
  • Whitespace/indentation requirements
  • File header requirements (ABOUTME, copyright)

Use deterministic tools instead:

  • ESLint/Biome for JavaScript/TypeScript style
  • Black/Ruff for Python formatting
  • Pre-commit hooks for file headers
  • Claude Code Hooks to run formatters

Why this matters: LLMs follow style rules inconsistently. A linter fails deterministically; Claude fails silently and unpredictably.

Exception: High-level philosophy is acceptable:

  • ✓ "Names should describe purpose, not implementation"
  • ❌ "Never use names like ZodValidator or MCPWrapper"

Progressive Disclosure

For complex guidance, don't embed everything in CLAUDE.md.

Pattern: Reference external docs, let Claude decide relevance.

## Reference Documentation
- Code conventions: See `docs/conventions.md`
- API patterns: See `docs/api-design.md`
- Testing philosophy: See `docs/testing.md`

Read these when the task involves the relevant area.

Benefits:

  • Keeps CLAUDE.md focused
  • Claude reads docs only when relevant
  • Easier to maintain separate concerns

Structure Template

User-Level

[Opening persona/philosophy - 1-2 lines]

## Working Together
[Relationship dynamics, communication preferences]

## Proactiveness
[When to proceed vs. pause for confirmation]

## Development Philosophy
[Universal principles: YAGNI, debugging approach, etc.]

## Guardrails
[Version control, testing principles - kept brief]

Project-Level

## Project Overview
[WHAT: Purpose, stack, structure]

## Development
[HOW: Build, test, lint commands]

## Architecture
[WHY: Key decisions, constraints - if non-obvious]

## Conventions
[Brief pointers to detailed docs if needed]

Quality Checklist

Before finalizing, verify:

Universal Applicability

  • Every instruction applies to every session (user-level) or every task in project (project-level)
  • No project-specific commands in user-level config
  • No tool references that may not exist

Instruction Economy

  • Under instruction budget (count them)
  • No redundancy with Claude Code's built-in behaviors
  • Examples trimmed or moved to reference docs

No LLM-as-Linter

  • No specific naming convention examples
  • No comment formatting rules
  • No file header requirements
  • Style guidance limited to philosophy, not specifics

Progressive Disclosure

  • Complex topics reference external docs
  • Main file under 100 lines (user) or 150 lines (project)
  • Examples in reference files, not inline

Clarity

  • Consistent heading hierarchy
  • No conflicting instructions
  • Actionable directives, not vague guidance

Common Pitfalls

  1. Over-specification: Including every preference instead of universally critical ones
  2. Style enforcement: Detailed naming/comment rules that Claude follows inconsistently
  3. Stale commands: Build/test commands that drift from actual tooling
  4. Auto-generation: Using /init instead of hand-crafting
  5. Tool assumptions: Referencing MCP servers or tools that aren't always available
  6. Conflicting rules: "Match surrounding style" + "Never use X pattern"
  7. Instruction inflation: Adding rules after each frustration instead of fixing root cause

When to Skip This Skill

  • Quick one-off projects (just use defaults)
  • Projects with existing, well-maintained CLAUDE.md
  • When the team already has established patterns

Example: Before/After

Before (problematic user-level):

## Naming
NEVER use names like ZodValidator, MCPWrapper, JSONParser...
[20 more lines of specific examples]

## Comments
All files MUST start with ABOUTME: header...

After (improved user-level):

## Code Style
Names should describe purpose, not implementation details.
Use project linters for formatting; don't rely on manual enforcement.

*Why better*: Philosophy over specifics. Linter handles enforcement deterministically.

Integration

After authoring CLAUDE.md:

  • User-level: Symlink to ~/.claude/CLAUDE.md or place directly
  • Project-level: Commit to .claude/CLAUDE.md in repository root
  • Validation: Start a new Claude Code session and observe if instructions are followed

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

04

需要参考平台分布和安装热度时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

补充不同宿主或平台的使用分布数据

能力 5

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Claude Code

28.15%
按下载量换算85

Antigravity

21.66%
按下载量换算65

Codex

16.52%
按下载量换算50

OpenCode

12.2%
按下载量换算37

Gemini CLI

7.37%
按下载量换算22

trae

3.78%
按下载量换算11

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

external-service

该 Skill 可能调用第三方服务、云服务或外部模型 API,使用前需要确认账号、额度、数据发送范围和服务条款。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。

来源信息

继续浏览同类 Skills