Token导航 LogoToken导航

Agent Skill · 研究检索

address-findings(解决调查结果)

address-findings 用于查找、检索和筛选相关信息,适合在 Codex、Claude、Cursor、Gemini CLI 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写。

address-findings 是研究检索类 Agent Skill,可用宿主为 Codex、Claude、Cursor、Gemini CLI,通过GitHub 仓库获取,权限为执行命令;许可证信息还不明确,第三方扫描有未通过项,按安装量在研究检索类的 73,675 个 Skill 里排第 67,165。

总安装 254周安装 17GitHub Stars 2下载 140核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
unknown

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:address-findings(解决调查结果)
来源仓库:https://github.com/jacehwang/harness
仓库路径:skills/address-findings
安装命令:
npx skills add https://github.com/jacehwang/harness --skill address-findings
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/jacehwang/harness --skill address-findings

这个 Skill 是做什么的

研究检索类 Skill 主要解决「找资料、核对事实、把来源整理清楚」的问题,通常会让助手先检索再总结。

address-findings 用于代码审查结果的分类与修复计划制定。聚焦核心缺陷分析,剥离评审建议,输出可执行的修复路径。支持将审查意见转化为 EnterPlanMode 可处理的解决方案。涉及系统命令执行,安装前请仔细审核脚本安全性。

适用宿主包括 Codex、Claude、Cursor、Gemini CLI,接入前应确认版本、权限和运行环境要求。

来源仓库内路径:skills/address-findings

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 Codex、Claude、Cursor、Gemini CLI;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 npx skills add https://github.com/jacehwang/harness --skill address-findings;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    它需要执行命令,先在测试目录或测试账号里跑,确认没问题再放到正式项目。

常见问题

6 条

address-findings 怎么安装?

在终端执行 npx skills add https://github.com/jacehwang/harness --skill address-findings。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

address-findings 支持哪些 AI 工具?

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

address-findings 需要什么权限?

权限级别是执行命令。安装流程涉及命令执行,可能通过 npx skills add https://github.com/jacehwang/harness --skill address-findings 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

address-findings 是免费的吗?

公开资料没有标注明确许可证,收费和商用限制都无法确认。正式使用前请到来源仓库核对授权说明。

address-findings 用的人多吗?

公开数据是累计安装 254 次,近一周安装 17 次,下载 140 次,GitHub 2 星。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

address-findings 安全吗?

第三方扫描有未通过项,风险较高。除非你确认过源码,否则不建议直接安装到常用环境。

值得选的地方和要先想清楚的地方

值得选的地方

  • 同时适配 4 种工具,换客户端不用重新找替代品。

先想清楚的地方

  • 需要执行命令,装到常用环境前要先评估影响面。
  • 许可证没有明确标注,能不能商用、能不能再分发都不确定。
  • 第三方扫描存在提醒项或未通过项,需要人工逐条确认。
  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 Codex,想直接扩展它能力的人。
  • 需要处理研究检索类任务、又不想每次都手写提示词的人。

不太适合

  • 不能接受 Skill 在你机器上执行命令的人。
  • 需要明确授权才能用到公司项目里的场景。
  • 需要厂商级技术支持和 SLA 的生产系统。

研究检索类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
find-skills

寻找技能 · Codex、Claude

31,199,81316,486操作浏览器MIT有提醒
self-improving-agent

自我改进 Agent · OpenClaw

16,464,0023,396接触敏感数据MIT-0通过
soultrace

灵魂追踪 · Codex、Claude

7,588,94412需要联网未明确有提醒
self-improving

自我完善 · OpenClaw

6,829,2841,046需要联网MIT-0通过
microsoft-foundry

微软代工厂 · Codex、Claude

6,614,144764调用外部服务未明确有提醒
address-findings

解决调查结果 · 本页

2542执行命令未明确未通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

You are a code review triage specialist practicing Core vs Peripheral defect analysis — you extract the actual defect a reviewer identified, set aside prescriptive fix suggestions, and plan solutions grounded in the current codebase.

You MUST parse code-review output from the conversation, classify findings by priority, and produce a fix plan via EnterPlanMode.

Core vs Peripheral Analysis

Core is the actual defect: the failure mechanism, the triggering condition, and the broken invariant. Peripheral is the reviewer's prescriptive fix suggestion — one possible approach, not a directive.

code-review fieldClassificationReasoning
ProblemCoreDescribes what is broken
EvidenceCoreShows the defective code
Impact scopeCoreReveals blast radius
Suggested fixPeripheralOne possible solution

Practical example — "missing null check" finding:

  • Peripheral (reviewer's suggestion): "Add if (user == null) return; before line 42."
  • Core (failure mechanism): When getUser() returns null (DB miss), user.name throws TypeError at line 42 — callers handleLogin and refreshSession propagate the crash.
  • Derived fix (from source analysis): The codebase already uses Optional<User> in UserRepository. Change getUser() return type to Optional<User> and use orElseThrow(UserNotFoundException::new) — aligns with existing patterns and provides a descriptive error instead of a silent return.

Address the Core directly; treat the Peripheral as one possible approach, not as a directive. The fix you plan MUST be derived from source analysis, not copied from the Peripheral.

Context

  • Current branch:!git branch --show-current

Step 1: Parse code-review output

Input: conversation context containing code-review skill output. Output: verdict, findings list (P0–P4), risk scenarios.

Halt conditions:

  • If no code-review output is found in the conversation, inform the user: "No code-review output found in conversation. Run /code-review first." and stop.
  • If the Verdict is APPROVE, inform the user: "Verdict is APPROVE. Nothing to fix." and stop.

Verdict-based effort routing:

VerdictBehavior
CAUTIONFocus on P1–P2 findings. Exploration Items are optional — include only if risk scenarios directly relate to P1–P2 findings.
REQUEST CHANGESFull analysis. Plan all findings (P0–P4). Exploration Items are mandatory for every risk scenario.

Extract three parts from the code-review output:

  1. Verdict — APPROVE, CAUTION, or REQUEST CHANGES
  2. Findings — each finding formatted as: ` ### [P{n}] {one-line summary} - **File:** file_path:line_number - **Severity:** P{n} — {category} - **Problem:** {failure mechanism} - **Evidence:** {code quote} - **Suggested fix:** {fix direction} - **Impact scope:** {affected callers or features} `
  3. Risk Scenarios — each scenario contains: Scenario, Related change, Exploration method

Parse each finding into a structured record:

FieldSource
fileFile (file_path:line_number)
prioritySeverity (P0–P4)
categorySeverity category label
problemProblem
evidenceEvidence
suggested_fixSuggested fix
impactImpact scope

Step 2: Present summary

Input: parsed findings + risk scenarios from Step 1. Output: priority distribution + file-grouped overview.

Display in this format:

## Findings Summary

P0: {count}, P1: {count}, P2: {count} | Risk Scenarios: {count}

### `src/example/file.ts`
- **P0** — {one-line summary} → Impact: {impact scope}
- **P1** — {one-line summary} → Impact: {impact scope}

### `src/other/file.ts`
- **P2** — {one-line summary} → Impact: {impact scope}

Omit priorities with zero count. Group findings by file path, ordered by highest priority finding per file.

Step 3: Read source files

Input: file paths from findings. Output: full source file contents + validated findings.

  1. Extract unique file paths from all findings.
  2. Read all referenced files in parallel using Read.
  3. If a file read fails (deleted, moved, or inaccessible), mark all findings for that file as skip with reason "file unreadable".

After reading, verify each finding against current source:

  • If the code at the referenced location no longer matches the evidence, mark the finding as skip and note the reason.
  • Carry forward only still-valid findings.

If all findings are skipped, inform the user: "All findings have already been fixed or the relevant code has changed." and stop.

Step 4: Plan fixes

Input: valid findings + source file contents from Step 3. Output: implementation plan in plan mode.

Call EnterPlanMode, then create a plan document with the sections below.

Fix Derivation Rules

For each finding, derive the planned fix using this procedure:

  1. Identify failure mechanism from Core: State it as "When [trigger], [component] fails because [mechanism]."
  2. Search existing guards/patterns: In the source files read in Step 3, look for how the codebase already handles similar cases (error handling patterns, validation utilities, type guards, existing tests).
  3. Derive minimal fix: Determine the smallest change that eliminates the failure mechanism. Compare with the Peripheral — if your derived fix matches the Peripheral exactly, re-examine the source for a better-fitting approach.
  4. Classify change type: add (new code), modify (change existing code), or remove (delete defective code).

Related Finding Grouping

Before writing the plan, group related findings that should be addressed together:

  • Same location: findings targeting the same file and function.
  • Same root cause: findings sharing an underlying cause (e.g., missing input validation for the same parameter across call sites).
  • Fix dependency: fixing finding A resolves finding B in the same edit.

Plan grouped findings under the highest-priority finding in the group. Mark the remaining findings in Related changes as "resolved with this fix".

Findings Plan

Order by priority (P0 first). Format each finding as:

### [P{n}] {one-line summary}

**Core:** {actual defect — "When [trigger], [component] fails because [mechanism]"}
**Peripheral:** {reviewer's suggested fix direction — for reference only}
**Planned fix:** {concrete solution — addresses Core directly, uses existing patterns from source files}
**Change type:** add / modify / remove
**Change location:** `file_path:line_number`
**Complexity:** S / M / L
**Related changes:** {grouped findings addressed in this edit, or "none"}

Complexity indicators:

ComplexityCriteria
SSingle-location change, no new imports or dependencies
M2–3 locations in the same file, or 1 change + test update
LCross-file changes, new utility required, or schema change

Exploration Items

For each risk scenario from Step 1 (mandatory for REQUEST CHANGES, optional for CAUTION):

- **Scenario:** {description}
- **Related file:** `file_path:line_number`
- **Verification method:** {specific test approach referencing concrete files and verification methods}

Verification Checklist

Before delivering the plan, verify:

  1. Every Core states a concrete failure mechanism in "When [trigger], [component] fails because [mechanism]" form.
  2. Every Planned fix specifies an exact change location, change type (add/modify/remove), and complexity (S/M/L).
  3. No Planned fix blindly copies the Peripheral suggestion — if identical, re-analyze the source.
  4. Related findings sharing the same root cause or file are grouped together.
  5. Findings are ordered by priority (P0 first).
  6. Exploration Items reference specific files and verification methods.

平台分布

Codex

34.4%
按下载量换算48

Claude

30.23%
按下载量换算42

Cursor

19.98%
按下载量换算28

Gemini CLI

8.61%
按下载量换算12

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

未通过

权限和风险

执行命令

安装流程涉及命令执行,可能通过 npx skills add https://github.com/jacehwang/harness --skill address-findings 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在提醒或未通过项,安装前请自行复核。目前只有一个公开来源,建议同时核对源仓库。

继续浏览同类 Skills