codingsamss/repo-hermes-config-template-sync
platforms/hermes/skills/software-development/repo-hermes-config-template-sync/SKILL.md
在 all-my-ai-needs 中新增 Hermes 脱敏配置模板与同步脚本，并补齐文档与验证。
$ install --global
skillsauthnpx skillsauth add codingsamss/ai-dotfiles repo-hermes-config-template-syncInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 9:36 PM2.1s1 file scanned
SKILL.md
- name:
- repo-hermes-config-template-sync
- description:
- 在 all-my-ai-needs 中新增 Hermes 脱敏配置模板与同步脚本，并补齐文档与验证。
Repo Hermes Config Template Sync
Trigger
当用户要求“Hermes 不仅同步 skills，还要有脱敏配置模板/同步方案（参考 Codex）”时使用。
Steps
- 新增
platforms/hermes/config.template.yaml
- 只保留受管配置片段。
- 敏感值使用占位符（例如
<PLAYWRIGHT_EXT_TOKEN>）。
- 新增
scripts/sync_to_hermes.sh
- 默认
--dry-run。 - 显式
--sync-config才写入。 - 支持
--yes跳过确认。 - 支持
--hermes-home指定目标目录。
- 合并策略
- 模板占位符优先保留目标文件中已有的非占位值。
- 若目标缺失，可从环境变量回填。
- 为 Playwright token 增加别名兼容：
PLAYWRIGHT_EXT_TOKENPLAYWRIGHT_MCP_EXTENSION_TOKEN
- 文档更新
- 根
README.md增加脚本入口和命令示例。 platforms/hermes/README.md增加模板与手动合并说明。platforms/hermes/runtime.yaml增加 notes/manual_steps/verify。
- 验证
bash -n scripts/sync_to_hermes.sh./scripts/sync_to_hermes.sh --help./scripts/sync_to_hermes.sh --dry-run- YAML parse check（模板与 runtime）
git diff --check- 隐私扫描命令无命中
Pitfalls
- Bridge 报
Invalid token provided常见是占位符未替换为有效值。 - 旧会话可能缓存旧配置；必要时用新会话复验。
runtime.yaml文本改动后应做 YAML 解析校验，避免格式回归。
Done Criteria
- 模板与脚本已入库。
- 文档联动更新完成。
- dry-run 可稳定执行。
- 未引入明文 secrets。
Related Skills
codingsamss/mx-im
development
VerifiedTrustedCommunity
Safely search MX users or groups and send Midea MX / 美信 IM messages from Codex. Use when the user asks to notify someone, send a message to a person or group, use a configured group alias, @ users, @ all, or send MX file/image messages. Read lookups need no extra authorization; every live send needs explicit user authorization for that exact target and message.
10SKILL.mdUpdated Jun 5, 2026
codingsamss/official-article-ingest
development
VerifiedTrustedCommunity
Use when Sam wants to collect, save, translate, or reformat official source articles/blog posts/research/product announcements into the Obsidian vault, especially requests mentioning 官方文章, 官网排版, 原始排版, 美观, 收录, 1:1, 原文1:1, or 英文中文对照1:1. Preserve the source site's information architecture and visual hierarchy rather than forcing a generic Markdown template.
9SKILL.mdUpdated Jun 11, 2026
codingsamss/mx-message-query
development
VerifiedTrustedCommunity
Query Midea MX / 美信 local message cache through the MX local HTTP query service from Codex. Use when the user asks to read MX sessions, search chat history, search messages globally or inside a group/session, list recent messages, or page message history. This is read-only and does not require send authorization. Never fall back to reading SQLite or app cache files directly.
8SKILL.mdUpdated Jun 5, 2026
codingsamss/mx-channel-rules
tools
VerifiedTrustedCommunity
MX channel output rules. Always active in MX conversations.
8SKILL.mdUpdated Jun 5, 2026