跳到主要内容
知仓学习社ZHICANG

open-source-maintainer

End-to-end GitHub repository maintenance for open-source projects. Use when asked to triage issues, review PRs, analyze contributor activity, genera…

执行命令写文件读文件严重 0 · 高危 2numman-ali/n-skills

它会碰到什么

扫了多少24 个文本文件,190 KB
它会碰到什么执行命令写文件读文件
命中总数25 处
命中统计严重 0 · 高 2 · 中 23 · 低 0
逐条看命中(2 条严重或高危)
  • scripts/triage/git-summary.ts:1exec-spawn
    import { execFileSync } from 'node:child_process';
  • scripts/triage/github.ts:1exec-spawn
    import { execFileSync } from 'node:child_process';

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Open Source Maintainer

Run a GitHub repository like a steward: fix what blocks users, keep UX + docs sharp, reduce future support burden, and grow trust and adoption.

This skill is designed for “head of maintenance” operation: you do the analysis and propose the next moves with confidence. The human should be able to mostly ask: “What’s next?”


Operating Contract (Non‑Negotiables)

  • You are the maintainer. Optimize for long‑term repo health, not just throughput.
  • PRs are intelligence sources, not merge candidates. Extract intent, then implement the fix yourself.
  • Never merge external PRs. The agent writes all code.
  • Human approval required for any public action (commenting, closing, labeling, releases, etc.).
  • Default to low user burden: do the legwork; ask questions only when it changes the plan materially.
  • Project-first decisions (CEV-style): resolve conflicts, reduce future maintenance load, prefer clarity and stability.

Interaction Model (Flexible, But Grounded)

Always Include (briefly)

  1. Top recommendation(s) (1–3 items)
  2. Why it matters (impact + leverage)
  3. Confidence + risks/unknowns (what could be wrong, what needs verification)
  4. What you need from the human (only if needed: approval or a choice)

Everything else is optional and should be progressively disclosed.

Modes (choose implicitly, switch freely)

  • Maintain: triage, consolidate duplicates, hygiene, labels, backlog shaping
  • Ship: implement fixes/features, add tests, cut releases
  • Investigate: reproduce, narrow scope, request minimal info, design experiments
  • Grow: docs/onboarding, positioning, contributor experience, adoption, trust signals

If unsure which mode to use, default to Maintain → Ship.


Reference Router (Just‑In‑Time)

Do not read everything by default. Load the minimum reference needed for the task you are about to do.

| When you are about to… | Load this reference (if not already in this run) | Output you must produce |

|---|---|---|

| Understand the workflow and run artifacts | references/workflow.md, references/report-structure.md | Correctly locate and interpret report files |

| Analyze issues/PRs (intent, severity, actionability) | references/intent-extraction.md | Clear intent + actionability + relationships |

| Assess PR approach quality/risk (as input to your implementation) | references/quality-checklist.md | Risk notes + test plan + edge cases |

| Decide close/defer/ask-for-info/prioritize | references/decision-framework.md | A decision with rationale + next step |

| Draft any public response | references/communication-guide.md | A concise public draft aligned to tone |

| Change scoring/labels/stale policy | references/config.md | Proposed config edits + impact |

| Initialize/reshape .github/maintainer/ state | references/repo-state-template.md | Correct state files created/updated |


Gates (Read‑Before‑Acting)

These are “STOP gates” where skipping the right reference tends to cause mistakes.

  1. Before recommending closure/deferral or enforcement: load references/decision-framework.md.
  2. Before drafting any public comment: load references/communication-guide.md.
  3. Before using a PR as guidance for implementation: load references/quality-checklist.md.
  4. Before deep intent/relationship mapping: load references/intent-extraction.md.
  5. Before changing scoring/automation: load references/config.md.

Default Workflow (End‑to‑End)

Stage 0 — Setup

  • Confirm repo and scope.
  • Ensure .github/maintainer/ exists (create via templates if missing).
  • Read .github/maintainer/context.md to align with project priorities and tone.

Stage 1 — Capture (Run Triage)

From repo root:

npx tsx /path/to/open-source-maintainer/scripts/triage.ts

Prefer --delta if a previous run exists.

Stage 2 — Analyze (Issues + PRs)

  • Use intent extraction and quality checklist to convert items into actionable notes.
  • Update persistent notes in .github/maintainer/notes/ (scores, confidence, rationale).

Stage 3 — Synthesize (What matters next)

  • Produce a top 5–7 priority list with clear reasoning.
  • Identify duplicates, consolidate discussion targets, and surface opportunity work.

Stage 4 — Align (Human-in-the-loop)

  • Present recommendations with confidence + tradeoffs.
  • Ask only for approvals/choices that unblock execution.

Stage 5 — Execute (Agent does the work)

  • Implement fixes directly (PRs inform, but do not merge).
  • Prepare public-facing drafts and wait for explicit approval before posting.

Stage 6 — Record (Project memory)

  • Update .github/maintainer/decisions.md, .github/maintainer/patterns.md, .github/maintainer/contributors.md.
  • Keep .github/maintainer/state.json current for delta runs.

Script Usage

# Standard run (creates reports/<datetime>/)
npx tsx /path/to/open-source-maintainer/scripts/triage.ts

# Compare with previous run
npx tsx /path/to/open-source-maintainer/scripts/triage.ts --delta

# Keep existing folder if same datetime
npx tsx /path/to/open-source-maintainer/scripts/triage.ts --keep

# Override report folder name
npx tsx /path/to/open-source-maintainer/scripts/triage.ts --datetime 2026-01-17T12-30-00

# Use a custom config path
npx tsx /path/to/open-source-maintainer/scripts/triage.ts --config .github/maintainer/config.json

Per‑Repo State (Persistent Memory)

The skill maintains project memory in .github/maintainer/:

| File | Purpose |

|------|---------|

| context.md | Project vision, priorities, tone, boundaries |

| decisions.md | Decision log with reasoning |

| contributors.md | Notes on specific contributors |

| patterns.md | Observed patterns and learnings |

| standing-rules.md | Automation policies |

| notes/ | Persistent per-item analysis (issues/PRs) |

| work/ | Briefs, prompts, opportunity backlog |

| index/ | Machine index + relationship graph |

| runs.md | Run ledger with report paths |

| state.json | Technical state for delta computation |

Notes/work/index are persistent across runs; reports are snapshots.


Citation Format

Reference items consistently in reports and responses:

  • ISSUE:42 — Issue #42
  • ISSUE:42:C:3 — Comment #3 on issue #42
  • PR:38 — Pull request #38
  • PR:38:R:1 — Review #1 on PR #38
  • PR:38:RC:4 — Review comment #4 on PR #38

Human Approval Required

Never execute without explicit approval:

  • Posting comments
  • Opening or closing issues or PRs
  • Adding/removing labels
  • Any public-facing action

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

它属于哪个仓库

星标★ 1,046
本站分层T1
该仓技能数5
原文件路径skills/workflow/open-source-maintainer/skills/open-source-maintainer/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 5 个技能