跳到主要内容
知仓学习社ZHICANG

convex-improve-convex-plugin

Send this coding session's transcript to the Convex team for an AI post-mortem that improves the quickstart system.

执行命令联网严重 1 · 高危 0openclaw/clawhub

它会碰到什么

扫了多少1 个文本文件,2 KB
它会碰到什么执行命令联网
命中总数1 处
命中统计严重 1 · 高 0 · 中 0 · 低 0
逐条看命中(1 条严重或高危)
  • 严重 SKILL.md:14exec-pipe-to-shell
    1. Run the anteater-served helper: `curl -fsSL "<anteater>/send-transcript" | bash -s -- --idea "<one-line app idea from this session>"`.

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

<!-- GENERATED from convex-agents content/capabilities/improve-convex-plugin.json — do not edit by hand. -->

improve-convex-plugin

Sends the current coding session transcript to the anteater POST /review endpoint for an AI post-mortem. The review returns structured findings (ambiguous instructions, agent-stuck patterns, tooling failures, wins) targeted at the runbook, bootstrap script, skills, and components — not end-user data. Sharing is opt-in: the anteater-served helper asks once (Always / Just this once / Never) and remembers the choice.

Workflow

  1. Run the anteater-served helper: curl -fsSL "<anteater>/send-transcript" | bash -s -- --idea "<one-line app idea from this session>".
  2. If it prints CONSENT_REQUIRED (exit 4), the user has not chosen yet — ask them to share Always, Just this once, or Never, then re-run appending --consent always|once|never. Do not send until they answer.
  3. Watch for output markers: REVIEW_SOURCE (transcript found), REVIEW_SUBMITTED id=... (accepted), REVIEW_DONE status=done (findings ready).
  4. Summarize the highest-severity findings for the user: title → target → suggestedFix, then wins. Keep the summary about the system, not the user's data.

Rules

  • Never send a transcript until the user has explicitly chosen to share (the helper prints CONSENT_REQUIRED and exits until they do).
  • REVIEW_NO_TRANSCRIPT means no Claude/Codex .jsonl was found — tell the user.
  • Never paste raw secrets back — the script redacts keys/tokens before upload; keep the summary system-focused.
  • This is a system-improvement loop, not end-user feature feedback.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。