技能 agents-md-audit
📦

agents-md-audit

v1.0 内容修订 r1 安全 ⚙️ 外部命令

Audit Agent Instructions for Accuracy and Risk

Stale commands, broken paths, and vague rules make agent instruction files unreliable. This skill combines local checks with evidence-based review to propose shorter, accurate instructions.

支持: Claude Codex Code(CC)
你是维护者?认领此 Skill 📊 75 合格

使用我的智能体安装

将此请求复制给你的智能体,其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "agents-md-audit" from https://skillstore.io/skills/agentkitco-agents-md-audit.md and its manifest at https://skillstore.io/api/skills/agentkitco-agents-md-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划,并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文,而不是读取完整页面时,请使用这些链接。

测试它

正在使用“agents-md-audit”。 An instruction file refers to a missing relative directory and repeats a long rule.

预期结果:

  • Must fix: The referenced directory does not exist relative to the repository root or instruction file.
  • Should trim: A repeated rule duplicates earlier guidance.
  • Proposed version: Retain one copy of the rule and remove the unsupported directory reference pending confirmation.

正在使用“agents-md-audit”。 An instruction file includes a possible credential and a deployment command.

预期结果:

  • Must fix: A possible secret was detected. Remove it and rotate the credential if it is real.
  • Not verified: The deployment command was not executed because deployment is excluded from the verification workflow.
  • Proposed version: Replace the credential with a reference to approved secret storage, subject to owner approval.

正在使用“agents-md-audit”。 Two instruction files require different package managers.

预期结果:

  • Contradictions: The instruction files specify different package managers.
  • Evidence needed: Confirm the intended package manager against repository configuration before selecting a replacement.
  • Proposed version: Keep one verified instruction in the appropriate scope after owner approval.

安全审计

安全
v1 • 2026/10/17 打开版本化报告

All 13 static findings are false positives involving Markdown, Python strings, comments, detection patterns, or dictionary operations. The checker reads local files without executing extracted commands or sending data over a network. The workflow permits safe local checks, excludes deployment and destructive commands, and requires approval before editing; no additional semantic security findings were identified.

2
已扫描文件
250
分析行数
0
复核项
0
已忽略误报
最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。
审计者: codex
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据,不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/agentkitco-agents-md-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentkitco-agents-md-audit/security.svg)](https://skillstore.io/skills/agentkitco-agents-md-audit?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/agentkitco-agents-md-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-agents-md-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/agentkitco-agents-md-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

agentkitco. (2026). agents-md-audit security audit report (audit version 1) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-agents-md-audit/audits/1

BibTeX 引用

@techreport{agentkitco-agentkitco-agents-md-audit-2026, author = {agentkitco}, title = {agents-md-audit security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/agentkitco-agents-md-audit/audits/1}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "agents-md-audit security audit report (audit version 1)" version: "1.0" type: report authors: - name: "agentkitco" date-released: "2026-10-17" url: "https://skillstore.io/skills/agentkitco-agents-md-audit/audits/1" identifiers: - type: other value: "skillstore:agentkitco-agents-md-audit:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
45
架构
85
可维护性
87
内容
65
社区
83
规范符合性

你能构建什么

Refresh Repository Instructions

Review AGENTS.md after repository changes and identify outdated commands, missing paths, and instruction lines that need correction.

Compare Assistant Rule Files

Compare Claude, Cursor, and Copilot instructions for conflicting rules, duplication, and guidance that belongs in scoped files.

Review Instructions Before Sharing

Identify possible secrets, unresolved placeholders, and unverified commands before distributing repository instructions.

试试这些提示

Review One File
Audit AGENTS.md for missing paths, vague rules, duplicates, and placeholders. Report evidence by line and wait for approval before editing.
Check Documented Commands
Audit CLAUDE.md against repository scripts and targets. Do not execute repository commands; mark runtime behavior as unverified and propose corrections supported by metadata.
Compare Instruction Sources
Find agent instruction files and identify their readers. Compare rules for contradictions, redundant guidance, and scope problems, citing file names and line numbers.
Prepare an Evidence-Based Rewrite
Audit all instruction files using the checker and manual review. Separate required fixes, trimming suggestions, contradictions, and unverified commands.

最佳实践

  • Run the checker from the repository root or provide its root option so metadata and path checks use the intended repository.
  • Inspect command definitions before permitting execution, and keep deployment, migration, and deletion commands unverified.
  • Cite evidence for required fixes, redact possible secrets, and obtain approval before applying proposed edits.

避免

  • Treating an empty checker report as proof that instructions are complete, correct, or secure.
  • Executing repository commands solely because their names resemble harmless lint or test checks.
  • Replacing incident-driven constraints or editing instruction files before the owner approves the proposed changes.

常见问题

Which instruction formats does this skill review?
The workflow covers AGENTS.md, CLAUDE.md, Claude rule files, Cursor rules, and GitHub Copilot instructions.
Does the Python checker execute commands from instruction files?
No. It compares recognized command text with repository metadata. The broader workflow separately allows safe checks and excludes deployment, migration, and deletion.
Does the skill edit files automatically?
The workflow requires a report and owner approval before editing. The checker only reads local files and prints findings.
How are possible secrets handled?
The checker reports the detected category without printing the matched value. The workflow recommends removal and rotation when the credential is real.
Can it find every contradiction or stale command?
No. Regular expressions and metadata checks have limited coverage. Contradictions and actual command behavior require additional review.
What does the checker require?
It uses Python 3.8 or later and only the standard library. The workflow provides manual checks when Python is unavailable.

开发者详情

作者

agentkitco

许可证

MIT

作者版本

v1.0

Skillstore 修订

r1

版本提示

作者声明的版本不符合 SemVer 规范。

引用

743429f75b17204d47661a86b577a575ad67517f

维护新鲜度

2026/10/17

使用量

0 次下载 · 0 次浏览

文件结构

agentkitco 的更多技能

查看全部
查看全部