跳到主要内容
知仓学习社ZHICANG

ecl-harness-engineer

Create or audit ECL Agent Harness infrastructure: AGENTS.md, change tracking, repository guidance, lint checks, CI gates, and agent handoff docs.

读凭据执行命令联网严重 17 · 高危 0sickn33/agentic-awesome-skills

它会碰到什么

扫了多少29 个文本文件,386 KB
它会碰到什么读凭据执行命令联网
命中总数36 处
命中统计严重 17 · 高 0 · 中 0 · 低 0
逐条看命中(17 条严重或高危)
  • 严重 references/adapters/typescript.md:173cred-paths
    - pattern: 'process\.env\.([A-Z_][A-Z0-9_]*)'
  • 严重 references/adapters/typescript.md:174cred-paths
    - pattern: 'process\.env\[[\x27"]([A-Z_][A-Z0-9_]*)[\x27"]\]'
  • 严重 references/adapters/typescript.md:221cred-paths
    3. `.env` containing `PORT=(\d+)` → use that port
  • 严重 references/environment-config-guide.md:244cred-paths
    # Scan .env.example or .env.sample
  • 严重 references/environment-config-guide.md:244cred-paths
    # Scan .env.example or .env.sample
  • 严重 references/environment-config-guide.md:245cred-paths
    if test -f .env.example; then
  • 严重 references/environment-config-guide.md:246cred-paths
    cat .env.example
  • 严重 references/environment-config-guide.md:247cred-paths
    elif test -f .env.sample; then
  • 严重 references/environment-config-guide.md:248cred-paths
    cat .env.sample
  • 严重 references/environment-config-guide.md:262cred-paths
    grep -rEi "(PASSWORD|SECRET|KEY|TOKEN|CREDENTIAL|AUTH)" --include="*.go" --include="*.ts" --include="*.py" . 2>/dev/null | grep -i "getenv\|environ\|process\.en
  • 严重 references/environment-detection-guide.md:149cred-paths
    { "path": ".env", "template": ".env.example", "purpose": "Local env config" }
  • 严重 references/environment-detection-guide.md:149cred-paths
    { "path": ".env", "template": ".env.example", "purpose": "Local env config" }
  • 严重 references/environment-detection-guide.md:303cred-paths
    # Load .env if exists
  • 严重 references/environment-detection-guide.md:304cred-paths
    if [ -f .env ]; then
  • 严重 references/environment-detection-guide.md:305cred-paths
    export $(grep -v '^#' .env | xargs)
  • 严重 references/environment-detection-guide.md:479cred-paths
    - `.env.example` / `.env.template` for expected variables
  • 严重 references/environment-detection-guide.md:479cred-paths
    - `.env.example` / `.env.template` for expected variables

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

ECL Harness Engineer

Design and create Harness Engineering infrastructure so AI agents can work reliably in a codebase.

> Core Philosophy: "Intelligence without infrastructure is just a demo." The Agent Harness is the Operating System — the LLM is just the CPU. The repository becomes the single source of truth — if an agent can't see it in context, it doesn't exist.

Detailed Guide

Read [the detailed guide](references/detailed-guide.md) before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.

When to Use This Skill

  • Use when a repository needs AI-agent collaboration infrastructure such as AGENTS.md, docs/ECL.md, docs/STATUS.md, harness change tracking, or mechanical validation gates.
  • Use when auditing an existing Agent Harness for missing ECL lifecycle docs, change templates, lint checks, environment contracts, or CI integration.
  • Use when converting repeated agent workflow failures into repository-local documentation, tests, lint rules, or lightweight auto-evolution checks.
  • Do not use for ordinary business feature implementation unless the requested work is specifically about creating or improving the repository harness.

Limitations

  • This skill creates or audits harness infrastructure; it does not replace product requirements, implementation planning, code review, or release approval for the target project.
  • The generated ECL docs, linters, scripts, and CI examples must be adapted to the repository's actual stack, security model, and existing contributor workflow before enforcement.
  • Auto-evolve recommendations are guidance only. Apply harness changes through normal review, validation, and rollback discipline instead of accepting them as autonomous policy changes.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

同名技能的其他版本

有 3 个不同仓库或目录里都有叫 ecl-harness-engineer 的技能。它们内容并不相同,别混用: