Token导航 LogoToken导航TokenDH.com
研究检索权限需确认github未标认证来源可访问clear审计通过

pipeline-auditor管道审核员

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

744

周安装

31

GitHub Stars

422

下载量

248
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

3

许可证

MIT

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:pipeline-auditor(管道审核员)
来源仓库:https://github.com/willoscar/research-units-pipeline-skills
仓库路径:skills/pipeline-auditor
安装命令:
npx skills add https://github.com/willoscar/research-units-pipeline-skills --skill pipeline-auditor
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。不同来源提供的安装方式可能略有差异;本站展示可直接复制的安装命令,安装前请核对来源页面。

skills.shnpx skills
npx skills add https://github.com/willoscar/research-units-pipeline-skills --skill pipeline-auditor

简介

pipeline-auditor 辅助安全审计、权限检查、凭据风险和认证流程排查。

  • 适合梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。
  • 使用时不能将工具输出直接当作最终结论,需人工复核关键判断。
  • 涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限和脱敏方式。
  • 建议在测试环境验证后再应用于真实系统,避免误操作导致安全风险。

SKILL.md

Pipeline Auditor (draft audit + regression)

Purpose: a deterministic “regression test” for the writing stage.

It answers:

  • did we leak placeholders or planner talk?
  • did citation scope drift?
  • did the draft fall back to generator voice (navigation/narration templates)?
  • is citation density/health sufficient for a survey-like draft?

This skill is analysis-only. It does not edit content. For survey/deep, style/citation-shape violations are blocking by default.

Inputs

  • output/DRAFT.md
  • outline/outline.yml
  • Optional (recommended):

- outline/evidence_bindings.jsonl - citations/ref.bib

Outputs

  • output/AUDIT_REPORT.md

What it checks (deterministic)

A150++ citation targets (used by the auditor):

  • Per-H3: >=12 unique citations (deep: >=14).
  • Global: >=150 unique citations across the full draft (recommended target: 165; deep floor: 165).
  • Placeholder leakage: ellipsis (..., ), TODO markers, scaffold tags.
  • Outline alignment: section/subsection order vs outline/outline.yml.
  • Survey tables (survey deliverable): require >=2 Markdown tables in the merged draft (index tables live in outline/tables_index.md) (inserted by section-merger from outline/tables_appendix.md).
  • Paper voice anti-patterns:

- narration templates (This subsection..., In this subsection...) - slide navigation (Next, we move..., We now turn to...) - pipeline voice (this run, “pipeline/stage/workspace” in prose)

  • Evidence-policy disclaimer spam: repeated “abstract-only/title-only/provisional” boilerplate inside H3 bodies.
  • Meta survey-guidance phrasing: survey synthesis/comparisons should....
  • Synthesis stem repetition: repeated Taken together,... and similar high-signal generator stems.
  • Numeric claim context: numbers without minimal evaluation context tokens (benchmark/dataset/metric/budget/cost).
  • Citation health (if citations/ref.bib exists): undefined keys, duplicates, basic formatting red flags.
  • Citation-shape hard gate (survey/deep): no adjacent citation blocks ([@a] [@b]), no duplicate keys inside one block ([@a; @a]), and per-H3 mid-sentence citation ratio >=30%.
  • Citation scope (if outline/evidence_bindings.jsonl exists): citations used per H3 should stay within the bound evidence set.

How to use the report (routing table)

Treat output/AUDIT_REPORT.md as a “what to fix next” router.

Common FAIL families -> responsible stage/skill:

  • Placeholders / leaked scaffolds

- Fix: C2–C4 artifacts are not clean. Route to subsection-briefs / evidence-draft / writer-context-pack, then rewrite affected sections.

  • Missing overview tables (draft has <2 tables)

- Fix: ensure table-schema + appendix-table-writer produced outline/tables_appendix.md (>=2 tables, citation-backed, no placeholders), then rerun section-merger (tables insert as an Appendix block by default).

  • Planner talk in transitions / narrator bridges

- Fix: rerun transition-weaver (and ensure briefs include bridge_terms / contrast_hook), then re-merge.

  • Narration templates / slide navigation inside H3

- Fix: rewrite the failing sections/S*.md via writer-selfloop (local, section-level) or subsection-polisher.

  • Evidence-policy disclaimer spam

- Fix: keep evidence policy once in Intro/Related Work (front matter), delete repeats in H3 (use draft-polisher or local section rewrites).

  • Citation scope drift (out-of-scope bibkeys)

- Fix: either (a) rewrite the subsection to stay in-scope, or (b) fix mapping/bindings (section-mapperevidence-binder) and regenerate packs.

  • Global unique citations too low

- Fix: citation-diversifiercitation-injector (NO NEW FACTS), then draft-polisher.

  • Intro/Related Work too thin / too few cites

- Fix: rewrite the corresponding sections/S<sec_id>.md front-matter file via writer-selfloop (front-matter path) using dense positioning + method paragraph.

Prevention guidance (what upstream writers should do)

If you want the auditor to PASS *without* a heavy polish loop:

  • Start each H3 with a content claim + thesis (avoid narration templates).
  • Use explicit contrasts and at least one evaluation anchor paragraph.
  • Embed citations per claim (avoid trailing cite dumps).
  • Put evidence-policy limitations once in the front matter, not in every H3.

Script

Quick Start

  • python.codex/skills/pipeline-auditor/scripts/run.py --help
  • python.codex/skills/pipeline-auditor/scripts/run.py --workspace workspaces/<ws>

All Options

  • --workspace <dir>
  • --unit-id <U###> (optional; for logs)
  • --inputs <semicolon-separated> (rare override; prefer defaults)
  • --outputs <semicolon-separated> (rare override; default writes output/AUDIT_REPORT.md)
  • --checkpoint <C#> (optional)

Examples

  • Run audit after global-reviewer and before LaTeX/PDF:

- python.codex/skills/pipeline-auditor/scripts/run.py --workspace workspaces/<ws>

Troubleshooting

Issue: audit fails due to undefined citations

Fix:

  • Regenerate citations with citation-verifier and ensure citations/ref.bib contains every cited key.

Issue: audit fails due to narration-style navigation phrases

Fix:

  • Rewrite as argument bridges (content-bearing handoffs, no navigation commentary) in the failing sections/* files, then re-merge.

Issue: audit fails due to "unique citations too low"

Fix:

  • Run citation-diversifier to produce output/CITATION_BUDGET_REPORT.md.
  • Apply it via citation-injector (edits output/DRAFT.md, writes output/CITATION_INJECTION_REPORT.md).
  • Then run draft-polisherglobal-reviewer → auditor.

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

04

需要参考平台分布和安装热度时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

补充不同宿主或平台的使用分布数据

能力 5

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Claude Code

30.86%
按下载量换算77

Gemini CLI

22.54%
按下载量换算56

Cursor

17.12%
按下载量换算42

Codex

13%
按下载量换算32

OpenCode

7.1%
按下载量换算18

Antigravity

3.42%
按下载量换算8

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

权限需确认

当前来源未能明确判断权限范围,默认进入异常复核队列。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。

来源信息

继续浏览同类 Skills