Token导航 LogoToken导航TokenDH.com
研究检索只读github未标认证来源可访问许可证需确认审计通过

grey-haven-suite-audit灰色天堂套房审计

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

222

周安装

9

GitHub Stars

24

下载量

70
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:grey-haven-suite-audit(灰色天堂套房审计)
来源仓库:https://github.com/greyhaven-ai/claude-code-config
仓库路径:skills/grey-haven-suite-audit
安装命令:
npx skills add https://github.com/greyhaven-ai/claude-code-config --skill grey-haven-suite-audit
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/greyhaven-ai/claude-code-config --skill grey-haven-suite-audit

简介

用于辅助安全审计、权限检查和凭据风险排查。

  • 适合梳理敏感配置、分析鉴权逻辑或生成安全复核清单。
  • 使用时不能将工具输出直接当作最终结论。
  • 涉及密钥或生产系统时,应先确认最小权限和操作边界。
  • 可结合项目安全策略进行合规性检查。grey-haven-suite-audit 属于研究检索类 Skill,可作为该场景下的辅助能力补充。

SKILL.md

Plugin Suite Auditor

Meta-level audit skill that analyzes any plugin suite using specialized subagents to identify usability improvements, coverage gaps, duplication, and workflow optimizations.

Purpose

Systematically evaluate a plugin ecosystem to:

  • Identify usability improvements for existing agents/skills
  • Recommend new agents that fill workflow gaps
  • Find duplication across agents that can be consolidated
  • Suggest workflow optimizations and integration points
  • Generate actionable improvement roadmaps

Audit Methodology

This skill orchestrates four specialized analysis passes using subagents, then synthesizes findings into a prioritized report.


Phase 1: Usability Analysis

Goal: Evaluate each agent/skill for user experience quality.

Usability Criteria

CriterionQuestionWeight
DiscoverabilityCan users find the right agent easily?20%
ClarityAre instructions clear and unambiguous?20%
CompletenessDoes the agent deliver on its promise?20%
FlexibilityCan it handle edge cases and variations?15%
IntegrationDoes it work well with other agents?15%
Output QualityAre outputs immediately usable?10%

Usability Red Flags

  • Vague or missing description triggers
  • No example requests provided
  • Missing collaboration/integration guidance
  • Incomplete output format definitions
  • No behavioral traits defined
  • Unclear scope boundaries

Subagent Analysis Prompt

Analyze [agent-name] for usability issues:

1. Read the agent definition thoroughly
2. Evaluate against these criteria:
   - Discoverability: Clear description with good trigger words?
   - Clarity: Unambiguous instructions?
   - Completeness: Covers expected use cases?
   - Flexibility: Handles variations?
   - Integration: Connects to other agents?
   - Output Quality: Well-defined formats?
3. Score each criterion 1-5
4. Identify specific improvement opportunities
5. Suggest concrete fixes

Output format:
## Usability Analysis: [Agent Name]
**Overall Score**: X/30
**Critical Issues**: [list]
**Improvements**: [list with specific recommendations]

Phase 2: Gap Analysis

Goal: Identify missing agents that would strengthen the suite.

Coverage Analysis Process

  1. Identify the plugin's domain (e.g., creative writing, testing, deployment)
  2. Map the complete workflow for that domain
  3. Check which stages have agent coverage
  4. Identify stages without dedicated support
  5. Evaluate gap significance

Gap Identification Criteria

A gap is worth filling if:

  1. Frequency: Users commonly need this capability
  2. Complexity: Task is complex enough to benefit from specialization
  3. Distinctness: Not adequately covered by existing agents
  4. Integration: Would enhance existing agent workflows

Subagent Analysis Prompt

Analyze [plugin-name] for coverage gaps:

1. Determine the plugin's domain and purpose
2. Map the complete workflow for this domain
3. Identify which workflow stages have agent coverage
4. Find stages without dedicated support
5. Evaluate gap significance:
   - How often do users need this?
   - Is it complex enough for an agent?
   - Could existing agents cover it with modifications?
6. Recommend new agents with specifications

Output format:
## Gap Analysis: [Plugin Name]
**Domain**: [what this plugin covers]
**Coverage Score**: X% of workflow covered
**Workflow Map**: [stages with coverage indicators]
**Critical Gaps**: [list with justification]
**Recommended New Agents**: [name, purpose, why needed]

Phase 3: Duplication Analysis

Goal: Find overlapping functionality that can be consolidated.

Duplication Types

TypeDescriptionAction
Full OverlapTwo agents do same thingMerge or deprecate one
Partial OverlapSignificant shared functionalityExtract common patterns
Conceptual OverlapSimilar approaches in different contextsDocument boundaries
Output OverlapProduce similar artifactsStandardize formats

Detection Patterns

Scan for:

  • Similar section headings across agents
  • Duplicate checklists or frameworks
  • Overlapping example requests
  • Redundant output templates
  • Repeated behavioral traits
  • Shared workflows

Subagent Analysis Prompt

Analyze [plugin-name] for duplication:

1. Read all agent definitions in the plugin
2. Create a feature matrix showing what each agent provides
3. Identify overlapping functionality:
   - Exact duplicates
   - Similar but not identical features
   - Overlapping scopes
4. Recommend consolidation strategies:
   - Merge agents
   - Extract shared components
   - Clarify boundaries
5. Estimate effort to consolidate

Output format:
## Duplication Analysis: [Plugin Name]
**Redundancy Level**: [Low/Medium/High]
**Full Overlaps**: [specific examples with quotes]
**Partial Overlaps**: [specific examples]
**Consolidation Recommendations**: [actions with rationale]

Phase 4: Workflow Optimization

Goal: Improve how agents work together.

Integration Analysis

Evaluate:

  • Are handoff points clearly defined?
  • Do agents reference each other appropriately?
  • Is there a natural workflow sequence?
  • Can outputs of one agent feed directly into another?
  • Are there workflow bottlenecks?

Workflow Pattern Template

WORKFLOW CHAINS
===============

Chain Name:
agent-1 → agent-2 → agent-3

Evaluation:
- Handoffs clear: [Yes/No]
- Output compatibility: [Yes/No]
- Documentation: [Yes/No]

Optimization Opportunities

  • Missing chain links
  • Unclear transition points
  • Redundant intermediate steps
  • Opportunity for parallel processing
  • Automation potential

Subagent Analysis Prompt

Analyze [plugin-name] agent workflow integration:

1. Map typical user journeys through the plugin
2. Identify how agents currently reference each other
3. Find workflow friction points:
   - Unclear handoffs
   - Missing integration
   - Redundant steps
4. Recommend optimizations:
   - New integration points
   - Workflow templates
   - Automation opportunities

Output format:
## Workflow Analysis: [Plugin Name]
**Integration Score**: X/10
**Workflow Chains Identified**: [list]
**Friction Points**: [specific issues]
**Optimization Recommendations**: [actions]

Audit Execution Protocol

Step 1: Load Plugin Context

1. Read plugin.json for metadata and component list
2. Glob all agents: [plugin-path]/agents/*.md
3. Glob all skills: [plugin-path]/skills/*/SKILL.md
4. Glob all commands: [plugin-path]/commands/*.md
5. Build inventory of all components

Step 2: Launch Subagent Analyses

Launch four analysis passes using the Task tool:

  1. Usability Analyzer - Reviews each agent for UX quality
  2. Gap Analyzer - Maps workflow coverage
  3. Duplication Detector - Finds redundancies
  4. Workflow Optimizer - Evaluates integration

Step 3: Synthesize Findings

Combine analyses into unified audit report:

# Plugin Suite Audit Report: [Plugin Name]

**Date**: [Date]
**Version Audited**: [version from plugin.json]
**Components Analyzed**: X agents, Y skills, Z commands

## Executive Summary

**Overall Health Score**: X/100

| Category | Score | Issues |
|----------|-------|--------|
| Usability | X/25 | X critical, X major |
| Coverage | X/25 | X gaps identified |
| Duplication | X/25 | X redundancies found |
| Workflow | X/25 | X friction points |

**Key Findings**:
1. [Most critical finding]
2. [Second finding]
3. [Third finding]

---

## Detailed Findings

### Usability Issues
[From Phase 1]

### Coverage Gaps
[From Phase 2]

### Duplication Concerns
[From Phase 3]

### Workflow Friction
[From Phase 4]

---

## Prioritized Recommendations

### Critical (Do First)
| # | Recommendation | Category | Effort | Impact |
|---|----------------|----------|--------|--------|
| 1 | [Action] | [Category] | [Low/Med/High] | [High] |

### Important (Do Soon)
[Table continues]

### Nice to Have (Consider)
[Table continues]

---

## Suggested New Agents

| Agent Name | Purpose | Gap Filled | Priority |
|------------|---------|------------|----------|
| [name] | [what it does] | [workflow gap] | [High/Med/Low] |

---

## Consolidation Targets

| Source A | Source B | Overlap | Recommendation |
|----------|----------|---------|----------------|
| [agent] | [agent] | [what overlaps] | [merge/extract/clarify] |

Step 4: Convert to Todos (User-Approved)

After presenting the report, use AskUserQuestion:

Which findings should I convert to actionable todos?

Options:
1. All recommendations (Critical + Important + Nice to Have)
2. Critical and Important only
3. Critical only
4. Let me select specific items
5. Report only, no todos

Upon approval, create todos with:

  • Clear action description
  • Category tag: [Usability], [Gap], [Duplication], [Workflow]
  • Priority indicator
  • Estimated effort

Example Audit Scenarios

Full Suite Audit

User: "Audit the creative-writing plugin suite"

Action:
1. Load creative-writing plugin context
2. Run all four analysis phases
3. Generate comprehensive report
4. Offer todo conversion

Targeted Usability Review

User: "Check usability of testing plugin agents"

Action:
1. Load testing plugin context
2. Run usability analysis only
3. Generate focused report

Gap Analysis Only

User: "What agents should we add to the observability plugin?"

Action:
1. Load observability plugin context
2. Run gap analysis only
3. Generate agent recommendations with specs

Duplication Check

User: "Find duplicate functionality in the knowledge-base plugin"

Action:
1. Load knowledge-base plugin context
2. Run duplication analysis only
3. Generate consolidation recommendations

Integration with Plugin Audit

This skill complements the grey-haven-plugin-audit skill:

SkillFocusLevel
plugin-auditStructure, frontmatter, deprecationsTechnical validation
suite-auditUsability, gaps, duplication, workflowStrategic improvement

Recommended workflow:

  1. Run plugin-audit first for technical health
  2. Run suite-audit for strategic improvements
  3. Combine findings into comprehensive roadmap

Quality Standards

  • Base recommendations on evidence from agent files
  • Provide specific quotes and file locations
  • Distinguish opinion from fact
  • Acknowledge when existing design is intentional
  • Prioritize actionable over theoretical improvements
  • Consider maintenance burden of recommendations
  • Respect existing architecture patterns
  • Be domain-aware (different plugins have different needs)

Skill Version: 1.0 Last Updated: 2025-01-08

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

37.24%
按下载量换算26

Claude

29.66%
按下载量换算21

Cursor

21.28%
按下载量换算15

Gemini CLI

9.15%
按下载量换算6

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

只读

该 Skill 主要提供规则、说明或参考内容,本身偏只读;真正读写文件、联网或执行命令仍取决于宿主 Agent 的任务。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills