跳到主要内容
知仓学习社ZHICANG

atlas

>

不碰外部(只输出文字)无严重或高危命中a5c-ai/babysitter

它会碰到什么

扫了多少1 个文本文件,6 KB
它会碰到什么不碰外部(只输出文字)
命中总数0 处
命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

atlas

This skill turns a stated need into a real systems atlas by SCANNING your

actual sources — Azure subscriptions (via read-only az), git repos, and local

directories — and process/data mining them, THEN enriching the result against the

Atlas knowledge graph. It is the brain of the atlas plugin. The scan is

PRIMARY; the graph is SECONDARY. For non-trivial runs it delegates orchestration

to babysitter:babysit using an atlas-specific .a5c process; for simple

lookups it queries the graph directly.

1. Scan-first, graph-second

The output you want is an evidence-backed inventory of your systems — e.g.

azure-inventory.json (every real resource id + RG from az),

workspace-inventory.json (real repo/dir scan), processes.json (real mined

CI/CD/IaC/.a5c processes), and a cross-linked SYSTEMS-ATLAS.md. Every item must

cite its REAL source. Generic catalog nodes are NOT the deliverable.

  • Primary — scan the user's real sources. Use Bash to run READ-ONLY scans:

az (account/group/resource list + per-service list/show) for Azure;

git + filesystem (Read/Glob) for repos and directories. NEVER invent

resource ids, regions, SKUs, or file paths — if you didn't observe it in real

output, it does not go in the atlas. Only scan the sources named in the need

(scoping, not a fallback).

  • Secondary — the Atlas knowledge graph. Atlas is a knowledge graph of

agents, processes, data models, capabilities, workflows, and wiki pages reached

through the mcp__atlas__atlas_public_* MCP tools (server URL overridable via

ATLAS_MCP_URL). Use it ONLY to add best-practice / comparison context for the

real systems you found — never as the primary content, never to pad the atlas

with generic nodes. See the atlas-graph-query skill for the tool surface.

2. When to use

| Trigger phrase | Command |

|----------------|---------|

| scan/inventory my real systems (azure + repos + dirs), map them | /atlas:discover |

| mine the real processes in my repos/cloud (CI/CD, IaC, .a5c, cron) | /atlas:mine-processes |

| mine the real data stores/models in my cloud + repos | /atlas:mine-data |

| collect the real constraints/gotchas of my scanned systems | /atlas:collect-nuances |

3. The need → real atlas pipeline (core method)

  1. Parse sources — interpret the stated need into concrete SOURCES: Azure

subscription(s), git repos, local directories, URLs, plus the output dir. If

the sources are genuinely ambiguous, run a short interview

(AskUserQuestion). Per repo policy, interview ONLY when truly unclear.

  1. Scan cloud (primary) — for each Azure source, run read-only az and write

a real cloud inventory citing resource ids/RGs. Skip cleanly (record a reason)

if no cloud source is in scope — only scan what's named.

  1. Scan local (primary) — for each repo/dir, scan the filesystem + git

(structure, submodules, manifests, languages, services, IaC) and write a real

inventory citing real paths.

  1. Enrich (secondary) — map the discovered real systems against the Atlas

graph for comparison context. Clearly secondary; never the headline.

  1. Synthesize — assemble a real, cross-linked layered atlas (components /

processes / data / integrations / nuances) where EVERY item cites its real

source, like SYSTEMS-ATLAS.md, plus a machine mirror.

  1. Converge (TDD) — each phase asserts its own checkable outputs before

proceeding (see the atlas processes), iterating until the assertions pass.

4. How to delegate

For any non-trivial run, hand off to babysitter:babysit (via the Skill tool)

naming the matching atlas process:

  • /atlas:discoveratlas-systems-discovery
  • /atlas:mine-processesatlas-process-mining
  • /atlas:mine-dataatlas-data-mining
  • /atlas:collect-nuancesatlas-collect-nuances

Do not hand-roll orchestration when a process exists.

5. Guardrails

  • No fallbacks (repo rule). Skipping an out-of-scope source class (e.g. no cloud

named) is correct scoping and must be recorded with a reason — it is NOT a

silent fallback to the public graph. If you find yourself writing a real

fallback, stop and fix the root cause.

  • Scan-first: every system/item in the atlas MUST cite a REAL source (an az

resource id / RG, or a file path). Never invent resource ids, regions, SKUs, or

file paths. Never invent graph node ids either — only reference ids returned by

the Atlas tools, and keep graph content strictly secondary.

  • Read-only scanning only: az read verbs, git status/remote/log, filesystem

reads. Never run mutating cloud/git/fs commands and never read secret values.

  • Keep breakpoints sparse; use them only when the sources to scan are genuinely

ambiguous.

  • The real scanning is done BY the agent via its Bash tool inside the agent

task prompt. Do not emit kind: 'shell' subtasks unless the user explicitly

asks for a shell-oriented workflow.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。