Token导航 LogoToken导航TokenDH.com
开发只读github未标认证来源可访问许可证需确认审计异常

rfc2119-sop-authoringrfc2119 sop 创作

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

212

周安装

9

GitHub Stars

52

下载量

74
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:rfc2119-sop-authoring(rfc2119 sop 创作)
来源仓库:https://github.com/zenobi-us/dotfiles
仓库路径:skills/rfc2119-sop-authoring
安装命令:
npx skills add https://github.com/zenobi-us/dotfiles --skill rfc2119-sop-authoring
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/zenobi-us/dotfiles --skill rfc2119-sop-authoring

简介

rfc2119-sop-authoring 用于辅助安全审计、权限检查和认证流程排查,帮助梳理敏感配置和鉴权逻辑。

  • 适用于安全复核清单生成和常见漏洞分析场景。
  • 可通过 npx 命令从 zenobi-us/dotfiles 仓库安装,建议查看原始 README 了解具体用法。
  • 使用时不能将工具输出直接当作最终结论,涉及密钥或生产系统时应确认最小权限和操作边界。
  • 输出内容需脱敏处理,避免暴露凭据或用户数据,优先使用模拟环境验证。

SKILL.md

RFC 2119 SOP Authoring

Overview

Agent SOPs (Standard Operating Procedures) are markdown-based instruction sets that guide AI agents through sophisticated workflows using natural language, parameterized inputs, and RFC 2119 constraint-based execution.

Core principle: Precise control over agent behavior without rigid scripting—RFC 2119 keywords (MUST, SHOULD, MAY) provide graduated constraints that allow agents to adapt while maintaining boundaries.

When to Use

  • Creating new workflow automation SOPs
  • Structuring multi-step agent workflows with constraints
  • Converting processes into reusable parameterized templates
  • Validating existing SOP format and structure
  • Need graduated constraints (hard requirements vs recommendations vs options)

When NOT to use:

  • Simple one-shot instructions (overkill)
  • Process doesn't need parameterization (use plain documentation)
  • Requirements are binary pass/fail (simpler formats suffice)

RFC 2119 Keywords

You MUST use these keywords as defined in RFC 2119:

KeywordMeaningWhen to Use
MUST / REQUIREDAbsolute requirementHard constraints that cannot be violated
MUST NOT / SHALL NOTAbsolute prohibitionActions that would cause failure/harm
SHOULD / RECOMMENDEDStrong recommendationBest practice with valid exceptions
SHOULD NOT / NOT RECOMMENDEDStrong discouragementUsually bad but sometimes acceptable
MAY / OPTIONALTruly optionalAgent decides based on context

Required SOP Structure

Every Agent SOP MUST include these sections in order:

# [SOP Name]

## Overview
[Concise description of what the SOP does and when to use it]

## Parameters

- **required_param** (required): Description
- **optional_param** (optional, default: "value"): Description

**Constraints for parameter acquisition:**
- If all required parameters are already provided, You MUST proceed to the Steps
- If any required parameters are missing, You MUST ask for them before proceeding
- When asking for parameters, You MUST request all parameters in a single prompt
- When asking for parameters, You MUST use the exact parameter names as defined

## Steps
### 1. [Step Name]
Description of what happens in this step.

**Constraints:**
- You MUST [specific requirement]
- You SHOULD [recommended behavior]
- You MAY [optional behavior]

## Examples
[Concrete usage examples]

## Troubleshooting
[Common issues and solutions]

File Naming & Location

Naming conventions:

  • File extension: .sop.md
  • Filename: kebab-case (e.g., code-assist.sop.md, idea-honing.sop.md)
  • Descriptive names indicating purpose

Location:

  • If agent-sops/ directory exists → write there
  • Otherwise → current directory or ask user

Parameter Section Rules

Parameter format:

- **parameter_name** (required): Description of required input
- **optional_param** (optional): Description of optional input
- **with_default** (optional, default: "default_value"): Description

Parameter naming:

  • Lowercase letters only
  • Underscores for spaces (snake_case)
  • Descriptive of purpose
  • Required parameters listed before optional

Required constraints block:

**Constraints for parameter acquisition:**
- If all required parameters are already provided, You MUST proceed to the Steps
- If any required parameters are missing, You MUST ask for them before proceeding
- When asking for parameters, You MUST request all parameters in a single prompt
- When asking for parameters, You MUST use the exact parameter names as defined

Steps Section Rules

Each step MUST have:

  1. Numbered heading: ### 1. Step Name
  2. Natural language description
  3. **Constraints:** section with RFC 2119 keywords

Example step:

### 1. Setup
Initialize the project environment and create necessary structures.

**Constraints:**
- You MUST validate directory structure exists
- You MUST create missing directories
- You MUST NOT proceed if directory creation fails
- You SHOULD log all setup actions
- You MAY skip validation if --force flag is provided

Conditional logic:

### 3. Conditional Processing
If validation passes, proceed with processing. Otherwise, report errors.

**Constraints:**
- You MUST check validation status before proceeding
- If validation passes, You MUST process the data
- If validation fails, You MUST report specific errors
- You MUST NOT continue with invalid data

Negative Constraints

Always provide context for negative constraints:

Good (with context):

- You MUST NOT use ellipses (...) because output will be read aloud by text-to-speech
- You SHOULD NOT delete Git history since this could corrupt the repository
- You MUST NOT run `git push` because this could publish unreviewed code

Bad (without context):

- You MUST NOT use ellipses
- You SHOULD NOT delete Git files
- You MUST NOT run git push

Common contexts:

  • Technical limitations: "because the system cannot handle..."
  • Security risks: "since this could expose sensitive data..."
  • Data integrity: "as this could corrupt important information..."
  • User experience: "because users will be confused by..."
  • Performance: "as this could cause significant slowdowns..."

Validation

Run validation after EVERY change:

# From this skill's directory:
./validate-sop.sh path/to/your-sop.sop.md

You MUST fix all errors (❌) before proceeding. You SHOULD address warnings (⚠️) when possible.

Examples Section

Include concrete examples showing:

  • Input parameters
  • Expected output/behavior
  • Common usage patterns
## Examples

### Example 1: Basic Usage
**Input:**
- task_description: "Create user authentication system"
- mode: "interactive"

**Expected Behavior:**
Agent will guide through workflow, creating tests first, then implementation.

Troubleshooting Section

Include common issues and solutions:

## Troubleshooting

### Parameter Validation Fails
If parameter validation fails, check that:
- All required parameters are provided
- Parameter names use snake_case
- Values match expected types

Interactive SOPs

For SOPs requiring user interaction:

  1. Clearly indicate when user interaction is expected
  2. Specify how to handle user responses
  3. Specify where to save interaction records
### 2. Requirements Clarification
Guide the user through questions to refine their initial idea.

**Constraints:**
- You MUST ask one question at a time
- You MUST append each Q&A to "idea-honing.md"
- You SHOULD adapt follow-up questions based on previous answers
- You MUST continue until sufficient detail is gathered

Quick Reference: Validation Checklist

CheckRequirement
File extension.sop.md
TitleH1 heading present
Overview## Overview section
Parameters## Parameters with constraints block
Steps## Steps with numbered headings (### 1.)
Constraints**Constraints:** in each step
RFC 2119Uses MUST/SHOULD/MAY keywords
Negative constraintsInclude "because/since/as" context
Examples## Examples (recommended)
Troubleshooting## Troubleshooting (recommended)

Common Mistakes

Missing Parameter Constraints Block

Every Parameters section needs the acquisition constraints block—this ensures consistent behavior.

Numbered Steps Missing

Steps must be numbered: ### 1. Step Name, not ### Step Name

Negative Constraints Without Context

"You MUST NOT do X" leaves agents guessing why. Always explain the reason.

Constraints Outside Steps

Don't put RFC 2119 constraints in Overview—they belong in the **Constraints:** section within each step.

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

35.91%
按下载量换算27

Claude

30.23%
按下载量换算22

Cursor

20.43%
按下载量换算15

Gemini CLI

10.98%
按下载量换算8

安全审计

Gen Agent Trust Hub

通过

Socket

未通过

Snyk

通过

权限和风险

只读

该 Skill 主要提供规则、说明或参考内容,本身偏只读;真正读写文件、联网或执行命令仍取决于宿主 Agent 的任务。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills