Token导航 LogoToken导航

Agent Skill · 研究检索

ecosystem-authoritative-sources(生态系统权威来源)

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

ecosystem-authoritative-sources 是研究检索类 Agent Skill,可用宿主为 Codex、Claude、Cursor、Gemini CLI,通过GitHub 仓库获取,权限为执行命令;许可证信息还不明确,第三方扫描有未通过项,按安装量在研究检索类的 73,675 个 Skill 里排第 53,729。

总安装 524周安装 21GitHub Stars 2下载 170核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
unknown

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:ecosystem-authoritative-sources(生态系统权威来源)
来源仓库:https://github.com/richfrem/agent-plugins-skills
仓库路径:skills/ecosystem-authoritative-sources
安装命令:
npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosystem-authoritative-sources
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosystem-authoritative-sources

这个 Skill 是做什么的

研究检索类 Skill 主要解决「找资料、核对事实、把来源整理清楚」的问题,通常会让助手先检索再总结。

生态系统权威来源参考库,对接 Anthropic Claude Plugins 官方标准。提供插件、技能与工作流的结构化规范与合规检查清单。支持新能力上线前的格式与元数据验证流程。依赖 Python 3.8+ 标准库,无需额外安装依赖项。

ecosystem-authoritative-sources 属于研究检索类 Skill,可作为该场景下的辅助能力补充。

来源仓库内路径:skills/ecosystem-authoritative-sources

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 Codex、Claude、Cursor、Gemini CLI;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosyste…;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    它需要执行命令,先在测试目录或测试账号里跑,确认没问题再放到正式项目。

常见问题

6 条

ecosystem-authoritative-sources 怎么安装?

在终端执行 npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosystem-authorit…。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

ecosystem-authoritative-sources 支持哪些 AI 工具?

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

ecosystem-authoritative-sources 需要什么权限?

权限级别是执行命令。安装流程涉及命令执行,可能通过 npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosystem-authoritative-sources 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

ecosystem-authoritative-sources 是免费的吗?

公开资料没有标注明确许可证,收费和商用限制都无法确认。正式使用前请到来源仓库核对授权说明。

ecosystem-authoritative-sources 用的人多吗?

公开数据是累计安装 524 次,近一周安装 21 次,下载 170 次,GitHub 2 星。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

ecosystem-authoritative-sources 安全吗?

第三方扫描有未通过项,风险较高。除非你确认过源码,否则不建议直接安装到常用环境。

值得选的地方和要先想清楚的地方

值得选的地方

  • 同时适配 4 种工具,换客户端不用重新找替代品。

先想清楚的地方

  • 需要执行命令,装到常用环境前要先评估影响面。
  • 许可证没有明确标注,能不能商用、能不能再分发都不确定。
  • 第三方扫描存在提醒项或未通过项,需要人工逐条确认。
  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 Codex,想直接扩展它能力的人。
  • 需要处理研究检索类任务、又不想每次都手写提示词的人。

不太适合

  • 不能接受 Skill 在你机器上执行命令的人。
  • 需要明确授权才能用到公司项目里的场景。
  • 需要厂商级技术支持和 SLA 的生产系统。

研究检索类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
find-skills

寻找技能 · Codex、Claude

31,199,81316,486操作浏览器MIT有提醒
self-improving-agent

自我改进 Agent · OpenClaw

16,464,0023,396接触敏感数据MIT-0通过
soultrace

灵魂追踪 · Codex、Claude

7,588,94412需要联网未明确有提醒
self-improving

自我完善 · OpenClaw

6,829,2841,046需要联网MIT-0通过
microsoft-foundry

微软代工厂 · Codex、Claude

6,614,144764调用外部服务未明确有提醒
ecosystem-authoritative-sources

生态系统权威来源 · 本页

5242执行命令未明确未通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

Dependencies

This skill requires Python 3.8+ and standard library only. No external packages needed.

To install this skill's dependencies:

pip-compile ./requirements.in
pip install -r ./requirements.txt

See ../../requirements.txt for the dependency lockfile (currently empty — standard library only).


Ecosystem Authoritative Sources

Official Open Standard Recognition

Important: This reference library draws heavy inspiration and structural standards directly from the Anthropic Claude Plugins official repositories. Please refer to:

  • Foundational Specification: https://github.com/anthropics/claude-plugins-official/tree/main/plugins/plugin-dev
  • L4 Interaction & Execution Patterns: Derived from https://github.com/anthropics/claude-knowledgework-plugins (specifically the Legal and Bio-Research plugins).
  • Skill Creator 2.0 (Anthropic, March 2026): https://github.com/anthropics/skills/tree/main/skills/skill-creator
  • Anthropic Official Claude Code docs: https://docs.anthropic.com/en/docs/claude-code/

Agentic OS / Agent Harness Pattern

The Agentic OS is a synthesized runtime environment pattern built from Anthropic primitives:

ComponentAnthropic PrimitiveOfficial URL
Project kernelCLAUDE.md hierarchy (5 scopes)https://docs.anthropic.com/en/docs/claude-code/memory
Scheduled tasks/loop commandhttps://docs.anthropic.com/en/docs/claude-code/loop
Task specialistsSub-agents (.claude/agents/)https://docs.anthropic.com/en/docs/claude-code/sub-agents
AutomationHooks (hooks.json)https://docs.anthropic.com/en/docs/claude-code/hooks
Personal shortcutsSlash commands (.claude/commands/)https://docs.anthropic.com/en/docs/claude-code/slash-commands
Per-project configPlugin settings (.claude/*.local.md)Anthropic plugin-dev docs

The context/ folder structure, heartbeat.md, START_HERE.md, and memory log patterns are community conventions built on top of these primitives (not Anthropic-official).

For bootstrapping Agentic OS in a project, use the agentic-os-init skill:

.agents/skills/agentic-os-init/SKILL.md

The Library

The following open standards are available for review:

This skill provides comprehensive information and reference guides about the conventions and constraints defining the extensibility ecosystem.

Because of the Progressive Disclosure architecture, you should selectively read the reference files below only when you need detailed information on that specific topic.

Installation

Claude Plugin Marketplace (Claude Code native — verified 2.1.81+)

Repos with a .claude-plugin/marketplace.json at the root can be registered as a marketplace:

/plugin marketplace add owner/repo
/plugin install <plugin-name>

Claude Code fetches from the default branch. The marketplace.json must be merged to main before consumers can install.

/plugin install <name> opens an interactive Plugins panel (not plain stdout) showing plugin details and a scope picker (user / project / local). The command returns no terminal output — UI renders in the panel.

Source types in marketplace.json:

  • Relative path (same-repo monorepo): "source": "./plugins/my-plugin" — resolved from repo root
  • Git subdirectory (sparse clone): "source": {"type": "git-subdir", "url": "...", "subdir": "..."}
  • npm package: "source": {"type": "npm", "package": "@scope/pkg", "version": "^1.0.0"}
  • Non-GitHub git: "source": {"type": "url", "url": "...", "ref": "main"}

strict field: true = plugin's own plugin.json wins; false = marketplace entry is the full definition (no plugin.json needed).

Validation before publishing: /plugin validate. or claude plugin validate.

Team/enterprise distribution (.claude/settings.json):

  • extraKnownMarketplaces — auto-register marketplace for the whole team
  • enabledPlugins — default-enable specific plugins for all team members
  • strictKnownMarketplaces: true — lock to approved marketplaces only (enterprise)
  • CLAUDE_CODE_PLUGIN_SEED_DIR env var — pre-populate plugins in containers/CI

Note: /plugin marketplace browse returns no content in 2.1.81 — use /plugin help to discover available subcommands.

npx skills CLI (cross-agent)

Universal CLI to install across all supported agents (Claude Code, Copilot, Gemini CLI, etc).

Quick Reference:

  • Install from GitHub: npx skills add <user>/<repo>
  • Install Specific Skill: npx skills add <user>/<repo>/plugins/<plugin-name>
  • Update All Skills: npx skills update
  • Local Development Install: rm -rf.agents/ && npx skills add./plugins/<plugin-name> --force

*For full installation documentation and architecture rules, strictly refer to skills.md.*

Table of Contents

To read any of the reference guides, use your file system tools to cat or view the relevant file.

  • Agent Skills: Definition, lifecycle, progressive disclosure, and constraints of .claude/skills/ (and equivalents like .agents/skills/ and .github/skills/). Custom agents deployed as Skills are stored here as <plugin>-<agent>/SKILL.md.

- reference/skills.md - reference/diagrams/skill-execution-flow.mmd

  • Claude Plugins: Specification for the .claude-plugin architecture, manifest setup, and distribution.

- reference/plugins.md - reference/diagrams/plugin-architecture.mmd

  • Antigravity Workflows & Rules (and Legacy Commands): Specifications for global/workspace Rules, deterministic trajectory Workflows, and the critical distinction between deploying Skills vs. Legacy Commands.

- reference/workflows.md

  • Sub-Agents: Definition, setup, and orchestration of nested contextual LLM boundaries. Sub-Agents are deployed structurally as pure Skills (mapped to skills/<agent-name>/SKILL.md).

- reference/sub-agents.md

  • GitHub Copilot Prompts (Models): Documentation on the exact YAML schema, dynamic variables, and exclusion logic (exclude-targets) used by GitHub Copilot chat environments.

- reference/github-prompts.md

  • GitHub Agentic Workflows: Documentation on the "Continuous AI" autonomous agents responding to CI/CD events.

- reference/github-agentic-workflows.md

  • Hooks: Lifecycle event integrations (e.g., pre-commit, on-startup).

- reference/hooks.md

  • Azure AI Foundry Agents: Documentation on how to map Open Agent-Skills to Azure Foundry Agent Service, including API payloads, constraints (e.g., 128-tool limits), and standard setups.

- reference/azure-foundry-agents.md

  • Marketplace: Registering registries and interacting with the marketplace.json distribution format.

- reference/marketplace.md

  • Installation & Management: Universal CLI guidelines for npx skills, including remote installations, updates, and local development workarounds.

- reference/npx-skills.md

Anthropic Plugin-Dev Key Learnings (March 2026)

The following patterns were confirmed from Anthropic's official plugin-dev plugin:

  • ${CLAUDE_PLUGIN_ROOT}: Absolute path to the plugin's installation directory (read-only during updates).
  • ${CLAUDE_PLUGIN_DATA}: Persistent directory for plugin state (e.g., node_modules, venv) that survives updates.
  • Prompt-based hooks: LLM-driven hooks run in parallel; use for semantic decisions. Command-based hooks for deterministic validation.
  • model: inherit: Default for sub-agents. Explicitly setting a model pins the agent to a version.
  • <example> blocks: Use 2-4 <example> blocks in agent frontmatter descriptions for richer trigger context (including proactive and negative instructions).
  • .local.md settings: Store per-project agent config in .claude/<plugin-name>.local.md (always gitignore).
  • examples/ directory: Add to skills alongside references/ for working code samples.
  • SKILL.md target: 1500-2000 words / under 500 lines. Third-person description, imperative body.
  • Description checklist: 3-5 triggers, 100-word limit, precise action verbs, 1 negative boundary.

Usage Instruction

Never guess the specifics of SKILL.md frontmatter, plugin directory limits, or workflow sizes. Read the exact specifications linked above before constructing new ecosystem extensions.

平台分布

Codex

33.77%
按下载量换算57

Claude

30.27%
按下载量换算51

Cursor

18.66%
按下载量换算32

Gemini CLI

10.51%
按下载量换算18

安全审计

Gen Agent Trust Hub

通过

Socket

未通过

Snyk

可疑

权限和风险

执行命令

安装流程涉及命令执行,可能通过 npx skills add https://github.com/richfrem/agent-plugins-skills --skill ecosystem-authoritative-sources 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在提醒或未通过项,安装前请自行复核。目前只有一个公开来源,建议同时核对源仓库。

继续浏览同类 Skills