Token导航 LogoToken导航TokenDH.com
研究检索执行命令github未标认证来源可访问许可证需确认审计异常

ecosystem-authoritative-sources生态系统权威来源

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

524

周安装

21

GitHub Stars

2

下载量

170
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:ecosystem-authoritative-sources(生态系统权威来源)
来源仓库:https://github.com/richfrem/agent-plugins-skills
仓库路径:skills/ecosystem-authoritative-sources
安装命令:
npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosystem-authoritative-sources
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosystem-authoritative-sources

简介

生态系统权威来源参考库,对接 Anthropic Claude Plugins 官方标准。

  • 提供插件、技能与工作流的结构化规范与合规检查清单。
  • 支持新能力上线前的格式与元数据验证流程。
  • 依赖 Python 3.8+ 标准库,无需额外安装依赖项。
  • ecosystem-authoritative-sources 属于研究检索类 Skill,可作为该场景下的辅助能力补充。

SKILL.md

Dependencies

This skill requires Python 3.8+ and standard library only. No external packages needed.

To install this skill's dependencies:

pip-compile ./requirements.in
pip install -r ./requirements.txt

See ../../requirements.txt for the dependency lockfile (currently empty — standard library only).


Ecosystem Authoritative Sources

Official Open Standard Recognition

Important: This reference library draws heavy inspiration and structural standards directly from the Anthropic Claude Plugins official repositories. Please refer to:

  • Foundational Specification: https://github.com/anthropics/claude-plugins-official/tree/main/plugins/plugin-dev
  • L4 Interaction & Execution Patterns: Derived from https://github.com/anthropics/claude-knowledgework-plugins (specifically the Legal and Bio-Research plugins).
  • Skill Creator 2.0 (Anthropic, March 2026): https://github.com/anthropics/skills/tree/main/skills/skill-creator
  • Anthropic Official Claude Code docs: https://docs.anthropic.com/en/docs/claude-code/

Agentic OS / Agent Harness Pattern

The Agentic OS is a synthesized runtime environment pattern built from Anthropic primitives:

ComponentAnthropic PrimitiveOfficial URL
Project kernelCLAUDE.md hierarchy (5 scopes)https://docs.anthropic.com/en/docs/claude-code/memory
Scheduled tasks/loop commandhttps://docs.anthropic.com/en/docs/claude-code/loop
Task specialistsSub-agents (.claude/agents/)https://docs.anthropic.com/en/docs/claude-code/sub-agents
AutomationHooks (hooks.json)https://docs.anthropic.com/en/docs/claude-code/hooks
Personal shortcutsSlash commands (.claude/commands/)https://docs.anthropic.com/en/docs/claude-code/slash-commands
Per-project configPlugin settings (.claude/*.local.md)Anthropic plugin-dev docs

The context/ folder structure, heartbeat.md, START_HERE.md, and memory log patterns are community conventions built on top of these primitives (not Anthropic-official).

For bootstrapping Agentic OS in a project, use the agentic-os-init skill:

.agents/skills/agentic-os-init/SKILL.md

The Library

The following open standards are available for review:

This skill provides comprehensive information and reference guides about the conventions and constraints defining the extensibility ecosystem.

Because of the Progressive Disclosure architecture, you should selectively read the reference files below only when you need detailed information on that specific topic.

Installation

Claude Plugin Marketplace (Claude Code native — verified 2.1.81+)

Repos with a .claude-plugin/marketplace.json at the root can be registered as a marketplace:

/plugin marketplace add owner/repo
/plugin install <plugin-name>

Claude Code fetches from the default branch. The marketplace.json must be merged to main before consumers can install.

/plugin install <name> opens an interactive Plugins panel (not plain stdout) showing plugin details and a scope picker (user / project / local). The command returns no terminal output — UI renders in the panel.

Source types in marketplace.json:

  • Relative path (same-repo monorepo): "source": "./plugins/my-plugin" — resolved from repo root
  • Git subdirectory (sparse clone): "source": {"type": "git-subdir", "url": "...", "subdir": "..."}
  • npm package: "source": {"type": "npm", "package": "@scope/pkg", "version": "^1.0.0"}
  • Non-GitHub git: "source": {"type": "url", "url": "...", "ref": "main"}

strict field: true = plugin's own plugin.json wins; false = marketplace entry is the full definition (no plugin.json needed).

Validation before publishing: /plugin validate. or claude plugin validate.

Team/enterprise distribution (.claude/settings.json):

  • extraKnownMarketplaces — auto-register marketplace for the whole team
  • enabledPlugins — default-enable specific plugins for all team members
  • strictKnownMarketplaces: true — lock to approved marketplaces only (enterprise)
  • CLAUDE_CODE_PLUGIN_SEED_DIR env var — pre-populate plugins in containers/CI

Note: /plugin marketplace browse returns no content in 2.1.81 — use /plugin help to discover available subcommands.

npx skills CLI (cross-agent)

Universal CLI to install across all supported agents (Claude Code, Copilot, Gemini CLI, etc).

Quick Reference:

  • Install from GitHub: npx skills add <user>/<repo>
  • Install Specific Skill: npx skills add <user>/<repo>/plugins/<plugin-name>
  • Update All Skills: npx skills update
  • Local Development Install: rm -rf.agents/ && npx skills add./plugins/<plugin-name> --force

*For full installation documentation and architecture rules, strictly refer to skills.md.*

Table of Contents

To read any of the reference guides, use your file system tools to cat or view the relevant file.

  • Agent Skills: Definition, lifecycle, progressive disclosure, and constraints of .claude/skills/ (and equivalents like .agents/skills/ and .github/skills/). Custom agents deployed as Skills are stored here as <plugin>-<agent>/SKILL.md.

- reference/skills.md - reference/diagrams/skill-execution-flow.mmd

  • Claude Plugins: Specification for the .claude-plugin architecture, manifest setup, and distribution.

- reference/plugins.md - reference/diagrams/plugin-architecture.mmd

  • Antigravity Workflows & Rules (and Legacy Commands): Specifications for global/workspace Rules, deterministic trajectory Workflows, and the critical distinction between deploying Skills vs. Legacy Commands.

- reference/workflows.md

  • Sub-Agents: Definition, setup, and orchestration of nested contextual LLM boundaries. Sub-Agents are deployed structurally as pure Skills (mapped to skills/<agent-name>/SKILL.md).

- reference/sub-agents.md

  • GitHub Copilot Prompts (Models): Documentation on the exact YAML schema, dynamic variables, and exclusion logic (exclude-targets) used by GitHub Copilot chat environments.

- reference/github-prompts.md

  • GitHub Agentic Workflows: Documentation on the "Continuous AI" autonomous agents responding to CI/CD events.

- reference/github-agentic-workflows.md

  • Hooks: Lifecycle event integrations (e.g., pre-commit, on-startup).

- reference/hooks.md

  • Azure AI Foundry Agents: Documentation on how to map Open Agent-Skills to Azure Foundry Agent Service, including API payloads, constraints (e.g., 128-tool limits), and standard setups.

- reference/azure-foundry-agents.md

  • Marketplace: Registering registries and interacting with the marketplace.json distribution format.

- reference/marketplace.md

  • Installation & Management: Universal CLI guidelines for npx skills, including remote installations, updates, and local development workarounds.

- reference/npx-skills.md

Anthropic Plugin-Dev Key Learnings (March 2026)

The following patterns were confirmed from Anthropic's official plugin-dev plugin:

  • ${CLAUDE_PLUGIN_ROOT}: Absolute path to the plugin's installation directory (read-only during updates).
  • ${CLAUDE_PLUGIN_DATA}: Persistent directory for plugin state (e.g., node_modules, venv) that survives updates.
  • Prompt-based hooks: LLM-driven hooks run in parallel; use for semantic decisions. Command-based hooks for deterministic validation.
  • model: inherit: Default for sub-agents. Explicitly setting a model pins the agent to a version.
  • <example> blocks: Use 2-4 <example> blocks in agent frontmatter descriptions for richer trigger context (including proactive and negative instructions).
  • .local.md settings: Store per-project agent config in .claude/<plugin-name>.local.md (always gitignore).
  • examples/ directory: Add to skills alongside references/ for working code samples.
  • SKILL.md target: 1500-2000 words / under 500 lines. Third-person description, imperative body.
  • Description checklist: 3-5 triggers, 100-word limit, precise action verbs, 1 negative boundary.

Usage Instruction

Never guess the specifics of SKILL.md frontmatter, plugin directory limits, or workflow sizes. Read the exact specifications linked above before constructing new ecosystem extensions.

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

33.77%
按下载量换算57

Claude

30.27%
按下载量换算51

Cursor

18.66%
按下载量换算32

Gemini CLI

10.51%
按下载量换算18

安全审计

Gen Agent Trust Hub

通过

Socket

未通过

Snyk

可疑

权限和风险

执行命令

安装流程涉及命令执行,可能通过 npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosystem-authoritative-sources 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills