atlas
>
它会碰到什么
这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。
技能内容
atlas
This skill turns a stated need into a real systems atlas by SCANNING your
actual sources — Azure subscriptions (via read-only az), git repos, and local
directories — and process/data mining them, THEN enriching the result against the
Atlas knowledge graph. It is the brain of the atlas plugin. The scan is
PRIMARY; the graph is SECONDARY. For non-trivial runs it delegates orchestration
to babysitter:babysit using an atlas-specific .a5c process; for simple
lookups it queries the graph directly.
1. Scan-first, graph-second
The output you want is an evidence-backed inventory of your systems — e.g.
azure-inventory.json (every real resource id + RG from az),
workspace-inventory.json (real repo/dir scan), processes.json (real mined
CI/CD/IaC/.a5c processes), and a cross-linked SYSTEMS-ATLAS.md. Every item must
cite its REAL source. Generic catalog nodes are NOT the deliverable.
- Primary — scan the user's real sources. Use
Bashto run READ-ONLY scans:
az (account/group/resource list + per-service list/show) for Azure;
git + filesystem (Read/Glob) for repos and directories. NEVER invent
resource ids, regions, SKUs, or file paths — if you didn't observe it in real
output, it does not go in the atlas. Only scan the sources named in the need
(scoping, not a fallback).
- Secondary — the Atlas knowledge graph. Atlas is a knowledge graph of
agents, processes, data models, capabilities, workflows, and wiki pages reached
through the mcp__atlas__atlas_public_* MCP tools (server URL overridable via
ATLAS_MCP_URL). Use it ONLY to add best-practice / comparison context for the
real systems you found — never as the primary content, never to pad the atlas
with generic nodes. See the atlas-graph-query skill for the tool surface.
2. When to use
| Trigger phrase | Command |
|----------------|---------|
| scan/inventory my real systems (azure + repos + dirs), map them | /atlas:discover |
| mine the real processes in my repos/cloud (CI/CD, IaC, .a5c, cron) | /atlas:mine-processes |
| mine the real data stores/models in my cloud + repos | /atlas:mine-data |
| collect the real constraints/gotchas of my scanned systems | /atlas:collect-nuances |
3. The need → real atlas pipeline (core method)
- Parse sources — interpret the stated need into concrete SOURCES: Azure
subscription(s), git repos, local directories, URLs, plus the output dir. If
the sources are genuinely ambiguous, run a short interview
(AskUserQuestion). Per repo policy, interview ONLY when truly unclear.
- Scan cloud (primary) — for each Azure source, run read-only
azand write
a real cloud inventory citing resource ids/RGs. Skip cleanly (record a reason)
if no cloud source is in scope — only scan what's named.
- Scan local (primary) — for each repo/dir, scan the filesystem + git
(structure, submodules, manifests, languages, services, IaC) and write a real
inventory citing real paths.
- Enrich (secondary) — map the discovered real systems against the Atlas
graph for comparison context. Clearly secondary; never the headline.
- Synthesize — assemble a real, cross-linked layered atlas (components /
processes / data / integrations / nuances) where EVERY item cites its real
source, like SYSTEMS-ATLAS.md, plus a machine mirror.
- Converge (TDD) — each phase asserts its own checkable outputs before
proceeding (see the atlas processes), iterating until the assertions pass.
4. How to delegate
For any non-trivial run, hand off to babysitter:babysit (via the Skill tool)
naming the matching atlas process:
/atlas:discover→atlas-systems-discovery/atlas:mine-processes→atlas-process-mining/atlas:mine-data→atlas-data-mining/atlas:collect-nuances→atlas-collect-nuances
Do not hand-roll orchestration when a process exists.
5. Guardrails
- No fallbacks (repo rule). Skipping an out-of-scope source class (e.g. no cloud
named) is correct scoping and must be recorded with a reason — it is NOT a
silent fallback to the public graph. If you find yourself writing a real
fallback, stop and fix the root cause.
- Scan-first: every system/item in the atlas MUST cite a REAL source (an
az
resource id / RG, or a file path). Never invent resource ids, regions, SKUs, or
file paths. Never invent graph node ids either — only reference ids returned by
the Atlas tools, and keep graph content strictly secondary.
- Read-only scanning only:
azread verbs,gitstatus/remote/log, filesystem
reads. Never run mutating cloud/git/fs commands and never read secret values.
- Keep breakpoints sparse; use them only when the sources to scan are genuinely
ambiguous.
- The real scanning is done BY the agent via its
Bashtool inside the agent
task prompt. Do not emit kind: 'shell' subtasks unless the user explicitly
asks for a shell-oriented workflow.
想直接用这个技能?
本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。