Token导航 LogoToken导航TokenDH.com
研究检索敏感数据github未标认证来源可访问许可证需确认审计提醒

code-silent-degradation代码静默降级

Agent Skill

code-silent-degradation 用于查找、检索和筛选相关信息,适合在 Codex、Claude、Cursor、Gemini CLI 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写。

总安装

776

周安装

32

GitHub Stars

28

下载量

253
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:code-silent-degradation(代码静默降级)
来源仓库:https://github.com/laurigates/claude-plugins
仓库路径:skills/code-silent-degradation
安装命令:
npx skills add https://github.com/laurigates/claude-plugins --skill code-silent-degradation
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/laurigates/claude-plugins --skill code-silent-degradation

简介

用于检测代码中静默失败或无效操作的退化模式。

  • 识别成功但无实际产出的逻辑缺陷。code-silent-degradation 属于研究检索类 Skill,可作为该场景下的辅助能力补充。
  • 适用于批量扫描与安全性审查场景。
  • 安装前需审核 shell 命令权限,防止误执行。
  • 建议与安全审查工具配合使用以提高覆盖率。

SKILL.md

Silent Degradation Scanner

Detect code patterns where operations complete "successfully" but produce empty or useless results because preconditions are silently unmet.

When to Use This Skill

Use this skill when...Use /code:review instead when...
A feature reports success but produces nothingYou need general code quality review
Scan/batch operations return 0 results silentlyYou want security or performance review
Users see green success banners for empty outcomesYou need SOLID principles assessment
Config-dependent features skip without warningYou want test coverage analysis
Multi-detector/multi-step operations silently skip stepsYou need architecture review

Context

  • Scan path: $ARGUMENTS (defaults to current directory if empty)
  • Source files:!find. -maxdepth 1 \(-name "*.ts" -o -name "*.tsx" -o -name "*.js" -o -name "*.jsx" -o -name "*.py" -o -name "*.go" -o -name "*.rs" \) -type f
  • Config patterns:!find. -maxdepth 1 \(-name ".env*" -o -name "config.*" -o -name "settings.*" \) -type f

Parameters

Parse from $ARGUMENTS:

  • PATH: Directory or file to scan (defaults to .)
  • --fix: Apply recommended fixes (add precondition checks, warning messages, status indicators)

Execution

Execute this silent degradation scan:

Step 1: Discover source files

Use Glob to find source files in the target path:

  • **/*.ts, **/*.tsx, **/*.js, **/*.jsx for TypeScript/JavaScript
  • **/*.py for Python
  • **/*.go for Go
  • **/*.rs for Rust

Exclude node_modules, dist, build, .git, vendor, __pycache__ directories.

Step 2: Scan for silent degradation patterns

Search each source file for these five pattern categories. Use Grep and Read to find matches.

Pattern 1: Silent skip on missing config

Code that checks for a config value and silently returns empty results when absent.

Indicators:

  • if (!apiKey) or if not api_key: followed by return [] or return 0 or continue
  • Environment variable checks that skip entire code paths without logging
  • Feature flag checks that silently disable functionality
  • process.env.X or os.environ.get() or os.Getenv() used in conditions that gate result-producing logic

Example of the problem:

// Silently returns nothing when Gemini isn't configured
if (!config.geminiApiKey) {
  return { suggestions: [] };  // No warning, no status
}

Pattern 2: Success message on zero results

Code that reports success regardless of whether meaningful work was performed.

Indicators:

  • Success/completion messages that don't distinguish between "found results" and "found nothing because preconditions failed"
  • Toast/notification/banner showing success with count === 0
  • Log messages like "Completed" or "Done" or "Scan finished" when result set is empty
  • HTTP 200 responses with empty arrays where the emptiness indicates a configuration problem, not genuinely zero matches

Example of the problem:

// Green banner whether it found 50 items or 0
toast.success(`Scan completed. Created ${results.length} suggestions.`);

Pattern 3: Multi-step operations with silent step skipping

Operations composed of multiple detectors/processors/steps where individual steps are skipped without surfacing this to the caller.

Indicators:

  • Loop over detectors/analyzers/processors that catches errors and continues
  • Skipped steps added to a list but not surfaced in the UI
  • try/catch blocks that swallow errors and continue iteration
  • Conditional execution of steps where skip reasons aren't propagated to the final result

Example of the problem:

for (const detector of detectors) {
  if (!detector.isAvailable()) {
    skipped.push(detector.name);  // Tracked but never shown
    continue;
  }
  results.push(...detector.run());
}
// skipped list exists but UX ignores it

Pattern 4: Missing precondition validation

Functions that require preconditions (data present, services configured, dependencies available) but don't validate or communicate them upfront.

Indicators:

  • Functions that query a data source and produce results only if specific data shapes exist (e.g., "entities with embeddings", "orphan records", "records older than N days")
  • No upfront check for whether the precondition is satisfiable
  • No documentation or runtime message explaining what data/config is needed
  • Database queries that naturally return empty when prerequisite data hasn't been set up

Example of the problem:

# Returns empty if no themes have embeddings - but doesn't check or warn
def find_similar_themes(threshold=0.85):
    themes = db.query(Theme).filter(Theme.embedding.isnot(None)).all()
    # If no embeddings exist, this silently returns []
    pairs = [(a, b) for a, b in combinations(themes, 2)
             if cosine_similarity(a.embedding, b.embedding) > threshold]
    return pairs

Pattern 5: Degraded mode without indication

Code that falls back to a degraded mode of operation (fewer features, reduced functionality) without any indication to the user that they're getting a partial experience.

Indicators:

  • Feature availability checks that reduce functionality without notification
  • Graceful degradation that's invisible to users
  • Optional dependency checks that silently disable capabilities
  • API version checks that fall back to limited functionality

Example of the problem:

// User has no idea they're getting a degraded scan
const detectors = [basicDetector];
if (geminiKey) detectors.push(aiDetector);      // silently omitted
if (hasEmbeddings) detectors.push(simDetector);  // silently omitted
return runDetectors(detectors);  // runs 1 of 3 with no indication

Step 3: Classify and report findings

For each finding, report:

FieldContent
Filefile:line reference
PatternWhich of the 5 patterns it matches
Severityhigh (success message on empty), medium (silent skip), low (missing validation)
What happensDescribe the silent failure from the user's perspective
PreconditionsList what must be true for the code to produce results
FixSpecific code change to surface the degradation

Severity guide:

  • High: User sees explicit success messaging when nothing worked (Pattern 2, 3)
  • Medium: Functionality silently disabled based on config/environment (Pattern 1, 5)
  • Low: Missing upfront validation that would help users understand requirements (Pattern 4)

Step 4: Generate summary

Print a summary table:

Silent Degradation Scan: <path>

| Pattern                    | Findings | Severity |
|----------------------------|----------|----------|
| Silent config skip         | N        | medium   |
| Success on zero results    | N        | high     |
| Silent step skipping       | N        | high     |
| Missing precondition check | N        | low      |
| Degraded mode hidden       | N        | medium   |

Total: N findings across M files

Step 5: Apply fixes (if --fix)

If --fix is specified, apply these fixes for each finding:

  1. Silent config skip: Add warning log before the early return
  2. Success on zero results: Change success message to distinguish "nothing found" from "couldn't check" and surface skip reasons
  3. Silent step skipping: Propagate skipped step information to the return value and surface in UI
  4. Missing precondition check: Add upfront validation with descriptive error messages listing what's needed
  5. Degraded mode hidden: Add status indicator showing which capabilities are active vs disabled

After applying fixes, list all changes made with file:line references.

Recommended Fixes Reference

Fix: Add precondition status panel

Before running multi-detector operations, check and display precondition status:

// Before
const results = await runScan();
toast.success(`Done. ${results.length} found.`);

// After
const status = checkPreconditions();
if (status.issues.length > 0) {
  showPreconditionPanel(status);  // "Gemini: not configured, Embeddings: 0 themes"
}
const results = await runScan();
toast.info(`Scan: ${results.active}/${results.total} detectors ran. ${results.length} found.`);

Fix: Distinguish "nothing found" from "couldn't check"

// Before
return { success: true, count: results.length };

// After
return {
  success: true,
  count: results.length,
  skipped: skippedDetectors,
  degraded: activeDetectors.length < totalDetectors,
  missingPreconditions: missingPrereqs,
};

Agentic Optimizations

ContextCommand
Quick scan/code:silent-degradation src/
Scan and fix/code:silent-degradation src/ --fix
Specific file/code:silent-degradation src/features/scanner.ts

Related Configure Skills

  • If error tracking not configured → /configure:sentry for error monitoring
  • If feature flags not managed → /configure:feature-flags for controlled rollouts

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

34.26%
按下载量换算87

Claude

29.12%
按下载量换算74

Cursor

18.94%
按下载量换算48

Gemini CLI

9.4%
按下载量换算24

安全审计

Gen Agent Trust Hub

可疑

Socket

通过

Snyk

通过

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置,应进入高风险复核队列,默认不自动发布。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills