eric861129/skill-updater
.agent/skills/skill-updater/SKILL.md
技能版本更新機制。指示 AI Agent 直接透過工具讀取遠端 GitHub 倉庫，比對 public/SKILLS/ 內技能的差異並執行自動化更新流程。
$ install --global
skillsauthnpx skillsauth add eric861129/skills_all-in-one skill-updaterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 7:37 PM4.4s1 file scanned
SKILL.md
- name:
- skill-updater
- description:
- 技能版本更新機制。指示 AI Agent 直接透過工具讀取遠端 GitHub 倉庫，比對 public/SKILLS/ 內技能的差異並執行自動化更新流程。
Skill Updater (技能版本更新機制)
此技能定義了 AI Agent 如何自主檢查並同步 SKILLS_All-in-one 平台中位於 public/SKILLS/ 內的公共技能，確保其安全性與遠端來源保持一致。
🚀 核心工作流 (Agent-Driven Update Pipeline)
當接收到「檢核更新」任務時，AI Agent 必須 執行以下動作：
Step 1: 遠端探索與內容比對 (Discovery & Diff)
- 讀取元數據：從
@src/data/skills.ts取得技能的githubUrl。 - 定位本地路徑：僅針對路徑位於
@public/SKILLS/下的技能執行檢查。 - 獲取遠端內容：使用
web_fetch讀取遠端路徑下的SKILL.md(原始碼)。- 提示：確保將 GitHub Tree URL 轉換為
raw.githubusercontent.com下載路徑。
- 提示：確保將 GitHub Tree URL 轉換為
- 執行比對：將遠端
SKILL.md的內容與本地public/SKILLS/目錄下的SKILL.md進行內容比對。 - 判定異動：若內容不一致或遠端 YAML 中的
version較新，則標記為「待更新」。
Step 2: 抓取新版 (Import Phase)
- 調用邏輯：參考
github-skill-importer。 - 目標：將遠端技能目錄下的所有檔案（含輔助腳本與資源）下載至臨時暫存區
@public/SKILLS/Uncategorized/tmp-update-{FolderName}/。
Step 3: 安全審查 (Audit Phase)
- 調用技能：
skill-security-auditor - 目標：對暫存區的新檔案執行代碼掃描，產出《更新安全審查報告》。
- 規則：結果必須為
PASS方可繼續。
Step 4: 原子化更新與遷移 (Update & SQL)
- 備份與校驗：
- 校驗：執行覆蓋前，必須 使用
read_file讀取暫存區檔案，確保內容非空且未損壞。 - 備份：考慮將舊版檔案暫存至
tmp-bak/，以利更新失敗時還原。
- 校驗：執行覆蓋前，必須 使用
- 覆蓋本地檔案：將通過審核的暫存區檔案移動至
@public/SKILLS/{Category}/下的正式路徑，覆蓋舊版。 - 元數據同步：更新
src/data/skills.ts中該技能的updatedAt或version。 - 資料庫遷移：調用
sql-migration-manager將UPDATE語句記錄於database/incremental_updates.sql頂部。
Step 5: 系統同步 (Manifest Sync)
- 執行指令：
npm run prebuild。 - 回報：向使用者呈報更新結果與版本變更摘要。
🚦 狀態管控規則 (Guardrails)
- 僅限公共技能：本更新機制 僅適用於
public/SKILLS/目錄下的技能。嚴禁將此流程應用於.agent/skills/內的內部管理技能。 - 自主性要求：AI Agent 應直接使用自身工具執行比對，嚴禁依賴外部腳本。
- 禁止靜默更新：偵測到差異後，應先列出清單向使用者確認。
- 防空檔案覆蓋 (Null-Overwrite Prevention)：嚴禁使用空檔案或未完整下載的檔案覆蓋正式環境。覆蓋前 必須 通過內容校驗。
- 檔案完整性：更新時必須確保該技能目錄下的所有關聯檔案同步更新。
📝 任務紀錄範本
- [x] Check: 偵測到內容差異。
- [x] Import: 已將新版檔案下載至暫存區。
- [x] Audit: 已執行安全掃描 (結果: PASS)。
- [x] Validation: 檔案內容校驗通過 (非空)。
- [x] Update: 檔案已覆蓋，元數據與
incremental_updates.sql已同步。 - [x] Sync: Manifest 已重新生成。
Related Skills
eric861129/what-if-oracle
development
VerifiedTrustedCommunity
Run structured What-If scenario analysis with multi-branch possibility exploration. Use this skill when the user asks speculative questions like "what if...", "what would happen if...", "what are the possibilities", "explore scenarios", "scenario analysis", "possibility space", "what could go wrong", "best case / worst case", "risk analysis", "contingency planning", "strategic options", or any question about uncertain futures. Also trigger when the user faces a fork-in-the-road decision, wants to stress-test an idea, or needs to think through consequences before committing.
38SKILL.mdUpdated Apr 4, 2026
eric861129/venue-templates
development
VerifiedTrustedCommunity
Access comprehensive LaTeX templates, formatting requirements, and submission guidelines for major scientific publication venues (Nature, Science, PLOS, IEEE, ACM), academic conferences (NeurIPS, ICML, CVPR, CHI), research posters, and grant proposals (NSF, NIH, DOE, DARPA). This skill should be used when preparing manuscripts for journal submission, conference papers, research posters, or grant proposals and need venue-specific formatting requirements and templates.
38SKILL.mdUpdated Apr 4, 2026
eric861129/the-fool
development
VerifiedTrustedCommunity
Use when challenging ideas, plans, decisions, or proposals using structured critical reasoning. Invoke to play devil's advocate, run a pre-mortem, red team, or audit evidence and assumptions.
38SKILL.mdUpdated Apr 4, 2026
eric861129/scientific-writing
tools
VerifiedTrustedCommunity
Core skill for the deep research and writing tool. Write scientific manuscripts in full paragraphs (never bullet points). Use two-stage process with (1) section outlines with key points using research-lookup then (2) convert to flowing prose. IMRAD structure, citations (APA/AMA/Vancouver), figures/tables, reporting guidelines (CONSORT/STROBE/PRISMA), for research papers and journal submissions.
38SKILL.mdUpdated Apr 4, 2026