跳到主要内容
知仓学习社ZHICANG

claude-code

claude-code,来自 mrgoonie/claudekit-skills 的 agent 技能。

读凭据执行命令写文件联网严重 13 · 高危 16mrgoonie/claudekit-skills

它会碰到什么

扫了多少16 个文本文件,104 KB
它会碰到什么读凭据执行命令写文件联网
命中总数37 处
命中统计严重 13 · 高 16 · 中 0 · 低 0
逐条看命中(29 条严重或高危)
  • 严重 references/best-practices.md:22cred-paths
    │   └── .env.example       # Environment template
  • 严重 references/best-practices.md:23cred-paths
    ├── .gitignore             # Ignore .claude/.env
  • 严重 references/best-practices.md:47cred-paths
    Copy `.claude/.env.example` to `.claude/.env` and fill in:
  • 严重 references/best-practices.md:47cred-paths
    Copy `.claude/.env.example` to `.claude/.env` and fill in:
  • 严重 references/best-practices.md:63cred-paths
    - `.claude/.env` (contains secrets)
  • 严重 references/best-practices.md:70cred-paths
    .claude/.env
  • 严重 references/best-practices.md:85cred-paths
    # Or .env file (gitignored)
  • 严重 references/best-practices.md:86cred-paths
    echo 'ANTHROPIC_API_KEY=sk-ant-xxxxx' > .claude/.env
  • 严重 references/mcp-integration.md:200cred-paths
    ### .env File
  • 严重 references/mcp-integration.md:202cred-paths
    # .claude/.env
  • 严重 references/troubleshooting.md:39persistence
    echo 'export ANTHROPIC_API_KEY=sk-ant-xxxxx' >> ~/.bashrc
  • 严重 references/troubleshooting.md:42cred-paths
    # Or use .env file
  • 严重 references/troubleshooting.md:43cred-paths
    echo 'ANTHROPIC_API_KEY=sk-ant-xxxxx' > .claude/.env
  • references/best-practices.md:21identity-config-write
    │   ├── mcp.json           # MCP servers (no secrets!)
  • references/best-practices.md:59identity-config-write
    - `.claude/mcp.json` (without secrets)
  • references/getting-started.md:176identity-config-write
    │   └── mcp.json           # MCP server configurations
  • references/hooks-and-plugins.md:21identity-config-write
    "hooks": {
  • references/hooks-and-plugins.md:57fs-destructive
    if echo "$TOOL_ARGS" | grep -E "rm -rf /|format|mkfs"; then
  • references/hooks-and-plugins.md:68identity-config-write
    "hooks": {
  • references/hooks-and-plugins.md:101identity-config-write
    "hooks": {
  • references/hooks-and-plugins.md:126identity-config-write
    "hooks": {
  • references/hooks-and-plugins.md:167identity-config-write
    │   └── mcp.json
  • references/hooks-and-plugins.md:184identity-config-write
    "mcpServers": "mcp/mcp.json",
  • references/hooks-and-plugins.md:387identity-config-write
    "hooks": {
  • references/ide-integration.md:86identity-config-write
    "mcpServers": ".claude/mcp.json",
  • references/mcp-integration.md:15identity-config-write
    MCP servers are configured in `.claude/mcp.json`:
  • references/mcp-integration.md:209identity-config-write
    ### Reference in mcp.json
  • references/mcp-integration.md:366identity-config-write
    - Version control mcp.json (without secrets)
  • references/troubleshooting.md:225fs-destructive
    rm -rf ~/.claude/cache/*

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Claude Code Expert

Claude Code is Anthropic's agentic coding tool that lives in the terminal and helps turn ideas into code faster. It combines autonomous planning, execution, and validation with extensibility through skills, plugins, MCP servers, and hooks.

When to Use This Skill

Use when users need help with:

  • Understanding Claude Code features and capabilities
  • Installation, setup, and authentication
  • Using slash commands for development workflows
  • Creating or managing Agent Skills
  • Configuring MCP servers for external tool integration
  • Setting up hooks and plugins
  • Troubleshooting Claude Code issues
  • Enterprise deployment (SSO, sandboxing, monitoring)
  • IDE integration (VS Code, JetBrains)
  • CI/CD integration (GitHub Actions, GitLab)
  • Advanced features (extended thinking, caching, checkpointing)
  • Cost tracking and optimization

Activation examples:

  • "How do I use Claude Code?"
  • "What slash commands are available?"
  • "How to set up MCP servers?"
  • "Create a new skill for X"
  • "Fix Claude Code authentication issues"
  • "Deploy Claude Code in enterprise environment"

Core Architecture

Subagents: Specialized AI agents (planner, code-reviewer, tester, debugger, docs-manager, ui-ux-designer, database-admin, etc.)

Agent Skills: Modular capabilities with instructions, metadata, and resources that Claude uses automatically

Slash Commands: User-defined operations in .claude/commands/ that expand to prompts

Hooks: Shell commands executing in response to events (pre/post-tool, user-prompt-submit)

MCP Servers: Model Context Protocol integrations connecting external tools and services

Plugins: Packaged collections of commands, skills, hooks, and MCP servers

Quick Reference

Load these references when needed for detailed guidance:

Getting Started

  • Installation & Setup: references/getting-started.md
  • Prerequisites, installation methods, authentication, first run

Development Workflows

  • Slash Commands: references/slash-commands.md
  • Complete command catalog: /cook, /plan, /debug, /test, /fix:, /docs:, /git:, /design:, /content:*
  • Agent Skills: references/agent-skills.md
  • Creating skills, skill.json format, best practices, API usage

Integration & Extension

  • MCP Integration: references/mcp-integration.md
  • Configuration, common servers, remote servers
  • Hooks & Plugins: references/hooks-and-plugins.md
  • Hook types, configuration, environment variables, plugin structure, installation

Configuration & Settings

  • Configuration: references/configuration.md
  • Settings hierarchy, key settings, model configuration, output styles

Enterprise & Production

  • Enterprise Features: references/enterprise-features.md
  • IAM, SSO, RBAC, sandboxing, audit logging, deployment options, monitoring
  • IDE Integration: references/ide-integration.md
  • VS Code extension, JetBrains plugin setup and features
  • CI/CD Integration: references/cicd-integration.md
  • GitHub Actions, GitLab CI/CD workflow examples

Advanced Usage

  • Advanced Features: references/advanced-features.md
  • Extended thinking, prompt caching, checkpointing, memory management
  • Troubleshooting: references/troubleshooting.md
  • Common issues, authentication failures, MCP problems, performance, debug mode
  • API Reference: references/api-reference.md
  • Admin API, Messages API, Files API, Models API, Skills API
  • Best Practices: references/best-practices.md
  • Project organization, security, performance, team collaboration, cost management

Common Workflows

Feature Implementation

/cook implement user authentication with JWT
# Or plan first
/plan implement payment integration with Stripe

Bug Fixing

/fix:fast the login button is not working
/debug the API returns 500 errors intermittently
/fix:types  # Fix TypeScript errors

Code Review & Testing

claude "review my latest commit"
/test
/fix:test the user service tests are failing

Documentation

/docs:init      # Create initial documentation
/docs:update    # Update existing docs
/docs:summarize # Summarize changes

Git Operations

/git:cm                    # Stage and commit
/git:cp                    # Stage, commit, and push
/git:pr feature-branch main  # Create pull request

Design & Content

/design:fast create landing page for SaaS product
/content:good write product description for new feature

Instructions for Claude

When responding to Claude Code questions:

  1. Identify the topic from the user's question
  2. Load relevant references from the Quick Reference section above
  3. Provide specific guidance using information from loaded references
  4. Include examples when helpful
  5. Reference documentation links from llms.txt when appropriate

Loading references:

  • Read reference files only when needed for the specific question
  • Multiple references can be loaded for complex queries
  • Use grep patterns if searching within references

For setup/installation questions: Load references/getting-started.md

For slash command questions: Load references/slash-commands.md

For skill creation: Load references/agent-skills.md

For MCP questions: Load references/mcp-integration.md

For hooks/plugins: Load references/hooks-and-plugins.md

For configuration: Load references/configuration.md

For enterprise deployment: Load references/enterprise-features.md

For IDE integration: Load references/ide-integration.md

For CI/CD: Load references/cicd-integration.md

For advanced features: Load references/advanced-features.md

For troubleshooting: Load references/troubleshooting.md

For API usage: Load references/api-reference.md

For best practices: Load references/best-practices.md

Documentation links:

  • Main docs: https://docs.claude.com/claude-code
  • GitHub: https://github.com/anthropics/claude-code
  • Support: support.claude.com

Provide accurate, actionable guidance based on the loaded references and official documentation.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

它属于哪个仓库

星标★ 2,216
本站分层T1
该仓技能数45
原文件路径.claude/skills/claude-code/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 45 个技能