Token导航 LogoToken导航TokenDH.com
研究检索只读github未标认证来源可访问许可证需确认审计提醒

solo-audit单独审核

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

710

周安装

29

GitHub Stars

15

下载量

227
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:solo-audit(单独审核)
来源仓库:https://github.com/fortunto2/solo-factory
仓库路径:skills/solo-audit
安装命令:
npx skills add https://github.com/fortunto2/solo-factory --skill solo-audit
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/fortunto2/solo-factory --skill solo-audit

简介

solo-audit 用于查找、检索和筛选相关信息,适合在 Codex、Claude、Cursor、Gemini CLI 中快速定位候选结果。

  • 适用于安全审计相关的信息检索与筛选任务。
  • 可通过来源仓库和 README 文档核验具体功能和使用方法。
  • 安装前需确认权限范围、维护状态及是否触发联网或文件操作。
  • 建议结合实际项目验证其适用性和准确性。

SKILL.md

/audit

Audit the knowledge base for quality issues: missing frontmatter, broken links, tag inconsistencies, orphaned files, and coverage gaps. Works on any markdown-heavy project.

Steps

  1. Parse focus area from $ARGUMENTS (optional). If provided, focus on that area (e.g., "tags", "frontmatter", "links"). If empty, run full audit.
  2. Find all markdown files: Use Glob to find all.md files, excluding common non-content directories: .venv/, node_modules/, .git/, archive/, .archive_old/.
  3. Frontmatter audit: First, scan a sample of existing files (first 10-20) to detect the frontmatter schema in use (which fields exist, what values are common for type and status). Then for each markdown file, check:

- Has YAML frontmatter (starts with --- and has closing ---) - Core fields present: title, tags (and any other fields consistently used across the KB) - type and status values (if used) are consistent with the detected schema - tags is a non-empty list Track files missing frontmatter and files with incomplete/invalid frontmatter.

  1. Link check: Look for broken internal links:

- Grep for markdown links \[.*\]\(.*\.md\) and verify each target file exists - If a link-checking script exists in the project (e.g., scripts/check_links.py), run it as well

  1. Tag consistency audit: Use Grep to find all tags: sections across.md files. Look for:

- Near-duplicate tags (e.g., "ai" vs "AI" vs "artificial-intelligence") - Tags used only once (potential typos) - Very common tags that might be too broad List all unique tags with counts.

  1. Orphaned files: Check which files are NOT referenced in any other file's related: field. Files that exist but are never cross-referenced may be orphaned.
  2. Content quality: Find documents that appear to be ideas or opportunities (based on detected type field or directory location) and check:

- Documents still in draft status for more than 30 days - Documents missing key metadata fields that other similar documents have - Documents with very little content (< 100 words, excluding frontmatter)

  1. Coverage gaps: Check each directory for content:

- Flag any empty or near-empty directories - Look for directories with only 1-2 files (may need more content)

  1. Output report: ## KB Audit Report **Date:** [today] ### Summary - Total.md files: X - With frontmatter: X (X%) - Without frontmatter: X ### Frontmatter Issues | File | Issue | |------|-------| | path | Missing field: type | ### Broken Links [list of broken references] ### Tag Analysis - Total unique tags: X - Single-use tags: [list] - Potential duplicates: [list] ### Orphaned Files [files not referenced anywhere] ### Content Quality - Stale drafts (> 30 days): [list] - Missing metadata: [list] - Low-content files: [list] ### Coverage [directory analysis] ### Recommendations 1. [specific action] 2. [specific action] 3. [specific action]

Gotchas

  1. Single-use tags are not always typos — a tag used once might be intentional (e.g., event-2026 for a specific event). Flag but don't auto-merge without checking context.
  2. Orphaned files may be intentional archives — files in 3-inbox/ or 4-opportunities/ are often standalone by design. Only flag orphans in methodology or principles directories.
  3. Frontmatter schemas drift across directories0-principles/ uses type: principle, 3-inbox/ uses type: capture. Detect per-directory norms, don't enforce one schema globally.
  4. related: field is not authoritative — many valid cross-references exist as inline markdown links [text](path.md), not just YAML related: arrays. Check both.
  5. Empty directories may be placeholders5-active-projects/ or 6-companies/ might be empty by design (populated by automation). Check registry.yaml or Makefile before flagging.

Common Issues

No markdown files found

Cause: Running in wrong directory or all files excluded. Fix: Ensure you're in the knowledge base root. Check exclude patterns in step 2.

Too many single-use tags

Cause: Inconsistent tagging across documents. Fix: Pick canonical tags from the most-used list. Run audit again after cleanup.

Frontmatter validation errors

Cause: YAML syntax issues (missing quotes, wrong indentation). Fix: Ensure --- delimiters are present. Use type: and status: values consistent with your KB's detected schema.

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

32.95%
按下载量换算75

Claude

29.39%
按下载量换算67

Cursor

18.76%
按下载量换算43

Gemini CLI

9.91%
按下载量换算22

安全审计

Gen Agent Trust Hub

可疑

Socket

通过

Snyk

通过

权限和风险

只读

该 Skill 主要提供规则、说明或参考内容,本身偏只读;真正读写文件、联网或执行命令仍取决于宿主 Agent 的任务。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills