跳到主要内容
知仓学习社ZHICANG

browse-and-evaluate

Use when exploring the ai-agent-skills catalog to find, compare, and evaluate skills before installing. Always use --fields to limit output size and…

不碰外部(只输出文字)无严重或高危命中MoizIbnYousaf/ai-agent-skills

它会碰到什么

扫了多少1 个文本文件,2 KB
它会碰到什么不碰外部(只输出文字)
命中总数0 处
命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Browse And Evaluate

Goal

Find the right skill for a task without flooding the context window or installing blindly.

Guardrails

  • Always use --fields on list/search/info to keep output small. Default: --fields name,tier,workArea,description.
  • Always use --dry-run before installing anything.
  • Never install more than 3 skills at once without explicit user confirmation.
  • Prefer --format json in non-interactive pipelines. The CLI defaults to JSON when stdout is not a TTY.
  • Use --limit when browsing large catalogs. Start with --limit 10.

Workflow

  1. Search or browse the catalog.
npx ai-agent-skills search <query> --fields name,tier,workArea,description --limit 10
  1. Get details on a candidate.
npx ai-agent-skills info <skill-name> --fields name,description,tags,collections,installCommands
  1. Preview the skill content.
npx ai-agent-skills preview <skill-name>
  1. Dry-run the install.
npx ai-agent-skills install <skill-name> --dry-run
  1. Install only after reviewing the dry-run output.
npx ai-agent-skills install <skill-name>

Gotchas

  • The preview command sanitizes skill content to strip prompt injection patterns. If content looks truncated, check if suspicious patterns were removed.
  • Collection installs pull multiple skills. Always --list or --dry-run a collection before installing.
  • Upstream (non-vendored) skills require a network fetch at install time. Use --dry-run to verify the source is reachable.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。