Files
workbuddy_skills/skills-security-check/_skillhub_meta.json
T
admin e03465c398 按用户令提交:把此前未纳管的 9 个技能目录一并入库
用户令逐字:「E:/ProgramData/.workbuddy/skills  提交仓库是指的这里」——
即本目录就是仓库(2026-10-07 已在本目录建仓,见当日日志 §22),本轮把余下未纳管的 9 个技能一并提交。

本次入库(9 个技能,46 个文件):
1、`AI HOT`
2、`draw-ui`
3、`dsh-diagnose`
4、`dsh-knowledge`
5、`dsh-local-env`
6、`dsh-opensource-release`
7、`dsh-workflow`
8、`oil-motion`
9、`skills-security-check`

提交前核对:
· **凭据类扫描**(`*.env` / `*token*` / `*.key` / `*secret*` / `*.pem`)⇒ **零命中** ✓;
· 体积合计约 20 MB(`draw-ui` 12M + `oil-motion` 6.5M 是大头,形态为配图/素材 ——
  仓库 `.gitignore` 里明写「`assets/*.png` 是内容不是产物」⇒ 属刻意入库);
· 运行产物仍按既定规则排除(`__pycache__` / `logs/` / `tmp/` / `.venv/` / `*.egg-info` / `uv.lock` / `.workbuddy/`)。
2026-10-08 22:29:08 +08:00

23 lines
1.1 KiB
JSON

{
"name": "Skill安全审计(云鼎实验室)",
"installedAt": 1786158433773,
"source": "marketplace",
"version": "1.0.0",
"skillId": "skill_2053082711420960768",
"examples_zh": [
"对这个社区技能做安全审计",
"检查技能里是否有敏感信息泄漏风险",
"审计技能的网络访问权限"
],
"examples_en": [
"Audit this community skill for security issues",
"Check for sensitive data leak risks in the skill",
"Review the network access permissions"
],
"iconSource": "https://openplatform-cdn.codebuddy.cn/public/skills/icons/skills-security-check.svg",
"iconLocalPath": "E:\\ProgramData\\.workbuddy\\skills\\skills-security-check\\_icon.svg",
"iconDownloadedFrom": "https://openplatform-cdn.codebuddy.cn/public/skills/icons/skills-security-check.svg",
"description_zh": "腾讯云鼎出品,Skill 安全审计工具",
"description_en": "Scan a third-party Claude Code skill for security risks before enabling it. Use...",
"installedContentHash": "sha256:ba9f6644f0a644ccbb1c7419591af9eec0296ea1188a37189e802920126e2953"
}