跳到主要内容
知仓学习社ZHICANG

doc

Write grounded docs, READMEs, repo instructions or continuity handoffs. Use when: these documents are requested; no reports as a routine completion …

改身份文件严重 0 · 高危 3hashgraph-online/awesome-codex-plugins

它会碰到什么

扫了多少18 个文本文件,96 KB
它会碰到什么改身份文件
命中总数3 处
命中统计严重 0 · 高 3 · 中 0 · 低 0
逐条看命中(3 条严重或高危)
  • scripts/audit-oss-docs.sh:142identity-write
    if [[ -f AGENTS.md ]]; then
  • scripts/audit-oss-docs.sh:143identity-write
    results+=("AGENTS.md:pass")
  • scripts/audit-oss-docs.sh:146identity-write
    results+=("AGENTS.md:fail")

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Doc

Write or update the documentation the caller needs, grounded in the current

repository and its accepted intent. A small explanation needs no interview,

coverage ledger or separate report. Select only the mode relevant to the task.

Modes

| Need | Scope and reference |

|---|---|

| Explain an API, command, code-map or architecture | Inspect its consumers and source; use [code/API guidance](references/default-mode.md) or [architecture guidance](references/architecture-report.md) when useful. |

| Create or improve a README | Lead with the user's problem and a working first-use path; preserve useful depth. See [README craft](references/readme-craft.md). |

| Audit or scaffold OSS documentation | Compare existing docs with the requested pack. Create missing files; revise existing files only within the authorized request. See [OSS pack](references/oss-pack.md). |

| Initialize missing entry documents | Create only explicitly requested missing files; report existing paths as skipped. See [setup examples](references/bootstrap/examples.md). |

| Preserve a session for another context | Write the compact factual handoff described below to the caller's authorized destination. |

These are optional task shapes, not successive phases. Detailed references

supply techniques and formats; they do not add interviews, approval checkpoints,

reports or files beyond the accepted request. Existing authorization to revise

specified documents is sufficient.

Grounded writing

  1. Identify the audience, question and existing document owner. Reuse accepted

intent; ask only for missing content that materially changes the document.

  1. Read the relevant declarations and verify them against code, configuration,

command help or executable behavior. Use the caller's domain terminology.

For a larger surface, retain enough source references to disclose what was

inspected and what remains unknown; do not imply whole-repository coverage.

  1. Make the smallest useful edit. Explain non-obvious rules, ordering and tradeoffs

when they help the reader; a reference page need not manufacture a lesson.

Preserve operator policy and history outside the authorized scope.

  1. Check links, examples and the repository's applicable documentation build or

validator. Remove empty claims and redundant prose; [prose guidance](references/de-slopify.md)

can help when the requested output is substantial.

  1. Return changed paths and check results, plus unresolved factual gaps. Write a

separate report only when the caller requests one or an existing consumer

requires it.

For AgentOps itself, read docs/contracts/ubiquitous-language.md: the product

is the operations layer for agentic engineering. Preserve the distinction

between that layer and caller-owned execution, work tracking and delivery.

Missing-document setup

Create only the requested missing documents, such as PRODUCT.md, GOALS.md

or AGENTS.md; a collision is skipped, not overwritten by setup. Verify the

created paths and report created, skipped and failed writes. Setup does not

install tools, run ao session bootstrap, initialize Git or trackers, start a

runtime, add hooks, or infer a repository workflow.

Standalone verdict storage at .agents/ao/verdicts/sha256/ is created only when

explicitly requested. New CDLC proof uses the caller-selected protected external

non-Git evidence root; a missing route permits no checkout fallback. Preserve

existing evidence and use the repository's actual source owners.

Session handoff

A requested handoff records end-state facts another context can verify:

  • accepted goal, completed artifacts and exact evidence paths;
  • commands and observed results, unresolved acceptance, findings and causal gaps;
  • useful repository/content identity, observed native stop state and measured

remaining allowance or explicit unknowns; record whether the helper for a

current HOLD incident was used when that fact matters to continuation;

  • permitted dispatch/startup association and observed runtime/session/context

identities, with separately evidenced parent/resume links and source bounds;

  • caller-supplied continuation, when present.

Follow [session associations](../cass/references/SESSION_FORMATS.md#work-to-session-associations)

for those identities. End-state notes cannot replace missing startup evidence.

Do not invent IDs, infer a paused goal from a report saying HOLD, assign a whole

multi-work session to one task, or reset budgets and helper incidents through

compaction. Preserve informative failures and withdrawn claims.

Check source, recipient/model and destination authorization before copying

metadata. An opaque locator grants no access. New CDLC handoffs require the

selected protected external non-Git destination; preserve legacy evidence and

report missing routing without creating a fallback file. Otherwise use the

caller's named location and read it back after writing.

Existing JSON under .agents/handoff/ remains read-only evidence.

ao session handoff writes .agents/ao/handoff/; ao session rehydrate searches

both and selects the newest lexical ID, preferring the canonical directory for

an identical filename. Those commands do not establish startup associations or

external storage authorization. Return the exact path to Markdown consumers.

Writing a handoff changes no tracker, Git, runtime or verdict state. The native

caller continues owning the authorized outcome; this documentation mode does

not select work or decide continuation for it.

Reference menu

Load these only for the document being written. They supply examples and

techniques under the kernel's accepted scope, not additional workflow gates.

  • Formats and examples: [generation templates](references/generation-templates.md), [project types](references/project-types.md).
  • OSS scope: [documentation tiers](references/oss-documentation-tiers.md), [OSS project types](references/oss-project-types.md).
  • Writing and checks: [prose workmanship](references/prose-and-report-workmanship.md), [validation techniques](references/validation-rules.md).
  • Explicit context configuration: [context routing](references/bootstrap/context-routing.md).

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。