📦
cursor
79从 CLI 控制 Cursor
开发者经常需要快速使用 Cursor 命令，而不想查找外部文档。此技能为文件、文件夹、diff、窗口、扩展和远程设置提供简洁的 CLI 指南。
编码与开发 查看
技能 caam
📦
caam
内容修订 r1 严重 ⚙️ 外部命令🌐 网络访问📁 文件系统访问
使用 CAAM 管理 AI CLI 账号切换
拥有多个 AI CLI 订阅的开发者需要可控的方式来跟踪本地身份验证配置文件。CAAM 记录了用于配置文件备份、激活、隔离、轮换和状态检查的命令。
支持: Claude Codex Code(CC)
请勿自动安装此 Skill。
权威策略要求在执行任何安装操作前由操作人员审查。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "caam" from https://skillstore.io/skills/dicklesworthstone-caam.md and its manifest at https://skillstore.io/api/skills/dicklesworthstone-caam/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“caam”。 开发者想在开始工作前知道哪个 AI CLI 账号处于活动状态。
预期结果:
回答会解释如何使用 CAAM 状态检查、解读配置文件匹配情况，并在启动会话前确认所选服务提供商。
正在使用“caam”。 团队负责人想审查自动故障转移是否可以接受。
预期结果:
回答会列出轮换行为、安全顾虑、政策考量，以及手动选择配置文件等更安全的替代方案。
正在使用“caam”。 顾问想要分离工作和个人 Codex 会话。
预期结果:
回答会比较 isolated profiles 与 vault profiles，并强调凭据、shell alias 和文件系统边界风险。
安全审计
严重v8 • 2026/7/6 打开版本化报告
Most Markdown backtick detections are false positives because they are documentation, not executable Ruby or JavaScript code. Confirmed risks remain around remote pipe-to-shell installation, sudo installation, OAuth token vaulting, forced file-based auth storage, sensitive home-directory links, shell aliases, and account rotation after rate limits.
1
已扫描文件
522
分析行数
24
复核项
0
已忽略误报
已确认安全问题 (11)
严重
Pipe to shell pattern
curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/coding_agent_account_manager/main/in
The documented one-line installer pipes a remote GitHub script directly into bash. This is a classic supply-chain risk because fetched code executes without local inspection or checksum verification.
严重
Pipe to shell pattern
curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/coding_agent_account_manager/main/in
The documented one-line installer pipes a remote GitHub script directly into bash. This is a classic supply-chain risk because fetched code executes without local inspection or checksum verification.
高
Environment file access
| **Gemini CLI** | Gemini Ultra (~$275/mo) | `~/.gemini/settings.json`, `~/.gemini/oauth_credentials
The skill references Gemini .env usage for authentication mode and local credential storage. Environment files commonly contain API keys or OAuth-related secrets.
高
Environment file access
- **Notes:** OAuth cache stored in `oauth_credentials.json`, API key mode uses `.env`.
The skill references Gemini .env usage for authentication mode and local credential storage. Environment files commonly contain API keys or OAuth-related secrets.
高
Credential JSON file
| **Gemini CLI** | Gemini Ultra (~$275/mo) | `~/.gemini/settings.json`, `~/.gemini/oauth_credentials
The referenced oauth_credentials.json file is an authentication credential store. Backing up or restoring it can expose bearer credentials for the Gemini account.
高
Credential JSON file
- **Notes:** OAuth cache stored in `oauth_credentials.json`, API key mode uses `.env`.
The referenced oauth_credentials.json file is an authentication credential store. Backing up or restoring it can expose bearer credentials for the Gemini account.
高
OAuth Bearer Token Vaulting
The skill explains that AI CLI OAuth tokens are plain local files and that possession grants access. It then documents backing up and restoring those tokens between profiles.
The text directly describes bearer-token files and a vault workflow for copying them. This is intentional credential handling, not a coincidental file reference.
高
Rate Limit Circumvention Workflow
The skill is designed to switch accounts after rate limits and rerun commands with another profile. This can enable business-logic abuse of provider usage controls.
The stated purpose and automatic failover steps explicitly connect rate-limit events to selecting another account and re-executing commands.
显示全部 11 条已确认问题
中
Git config file
Each profile gets its own `$HOME` and `$CODEX_HOME` with symlinks to your real `.ssh`, `.gitconfig`,
The skill documents symlinking or exposing the real ~/.gitconfig into isolated profile homes. This can leak developer identity and trusted Git configuration into wrapped sessions.
中
Git config file
└── .gitconfig -> ~/.gitconfig
The skill documents symlinking or exposing the real ~/.gitconfig into isolated profile homes. This can leak developer identity and trusted Git configuration into wrapped sessions.
中
Shell Alias Interception of AI Tools
The skill recommends aliases that replace normal Claude and Codex commands with a CAAM wrapper. This can hide automatic account switching behind familiar command names.
The alias blocks explicitly map common AI CLI names to caam run. The risk is contextual command interception rather than the Markdown syntax itself.
能力复核项 (24)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
sudo privilege escalation
sudo mv caam /usr/local/bin/
The installation instructions move a community-built binary into /usr/local/bin with sudo. This grants elevated install authority to code built from the external repository.
高
Hidden file in home directory
~/.claude.json ←→ ~/.local/share/caam/vault/claude/alice@gmail.com/
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file in home directory
~/.codex/auth.json ←→ ~/.local/share/caam/vault/codex/work@company.com/
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file in home directory
| **Claude Code** | Claude Max ($200/mo) | `~/.claude.json`, `~/.config/claude-code/auth.json`, `~/.
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file in home directory
| **Codex CLI** | GPT Pro ($200/mo) | `~/.codex/auth.json` (or `$CODEX_HOME/auth.json`) |
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file in home directory
| **Gemini CLI** | Gemini Ultra (~$275/mo) | `~/.gemini/settings.json`, `~/.gemini/oauth_credentials
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file in home directory
- **Notes:** Respects `CODEX_HOME`. CAAM enforces file-based auth by writing `cli_auth_credentials_s
The skill says CAAM writes Codex configuration under the user home to force file-based credential storage. This changes auth storage behavior and can weaken protected credential handling.
高
Hidden file in home directory
~/.local/share/caam/
The hidden CAAM data directory is documented as the vault root for saved auth profiles. In context, compromise of this location can expose stored account tokens.
高
Hidden file in home directory
│ │ │ ├── auth.json # From ~/.config/claude-code/
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file in home directory
├── .ssh -> ~/.ssh
The isolated profile structure links the real ~/.ssh directory into a generated home. This can expose SSH keys and agent configuration to wrapped CLI sessions.
高
Hidden file in home directory
└── .gitconfig -> ~/.gitconfig
The isolated profile structure links the real ~/.gitconfig into a generated home. This exposes developer identity and Git behavior across profile boundaries.
高
Hidden file access
~/.claude.json ←→ ~/.local/share/caam/vault/claude/alice@gmail.com/
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file access
~/.codex/auth.json ←→ ~/.local/share/caam/vault/codex/work@company.com/
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file access
| **Claude Code** | Claude Max ($200/mo) | `~/.claude.json`, `~/.config/claude-code/auth.json`, `~/.
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file access
| **Codex CLI** | GPT Pro ($200/mo) | `~/.codex/auth.json` (or `$CODEX_HOME/auth.json`) |
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file access
| **Gemini CLI** | Gemini Ultra (~$275/mo) | `~/.gemini/settings.json`, `~/.gemini/oauth_credentials
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file access
- **Notes:** Respects `CODEX_HOME`. CAAM enforces file-based auth by writing `cli_auth_credentials_s
The skill says CAAM writes Codex configuration under the user home to force file-based credential storage. This changes auth storage behavior and can weaken protected credential handling.
高
Hidden file access
~/.local/share/caam/
The hidden CAAM data directory is documented as the vault root for saved auth profiles. In context, compromise of this location can expose stored account tokens.
高
Hidden file access
│ │ │ ├── auth.json # From ~/.config/claude-code/
The referenced hidden files are AI CLI authentication or OAuth credential files under the user home directory. Copying or restoring them can expose bearer tokens with account access.
高
Hidden file access
├── .ssh -> ~/.ssh
The isolated profile structure links the real ~/.ssh directory into a generated home. This can expose SSH keys and agent configuration to wrapped CLI sessions.
中
Hidden file access
└── .gitconfig -> ~/.gitconfig
The isolated profile structure links the real ~/.gitconfig into a generated home. This exposes developer identity and Git behavior across profile boundaries.
中
Hidden file access
# Add aliases to .bashrc/.zshrc
The instructions encourage modifying shell startup files so common AI CLI commands are wrapped by CAAM aliases. This changes command behavior persistently for future shells.
低
Hardcoded URL
curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/coding_agent_account_manager/main/in
The hardcoded GitHub raw URL is used to fetch a remote installer in the documented one-liner. Network access is expected, but it increases supply-chain risk when combined with shell execution.
低
Hardcoded URL
curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/coding_agent_account_manager/main/in
The hardcoded GitHub raw URL is used to fetch a remote installer in the documented one-liner. Network access is expected, but it increases supply-chain risk when combined with shell execution.
风险因素
⚙️ 外部命令 (111)
SKILL.md:15-18 SKILL.md:18-22 SKILL.md:22-24 SKILL.md:24-32 SKILL.md:32-35 SKILL.md:35-37 SKILL.md:37-45 SKILL.md:45-57 SKILL.md:57-75 SKILL.md:75-83 SKILL.md:83-86 SKILL.md:86-94 SKILL.md:94-99 SKILL.md:99-101 SKILL.md:101 SKILL.md:109 SKILL.md:110 SKILL.md:111 SKILL.md:116-121 SKILL.md:121 SKILL.md:122 SKILL.md:125 SKILL.md:126 SKILL.md:134-135 SKILL.md:135-136 SKILL.md:136-137 SKILL.md:137-138 SKILL.md:138-139 SKILL.md:139-140 SKILL.md:140-141 SKILL.md:141-143 SKILL.md:143 SKILL.md:149-150 SKILL.md:150-151 SKILL.md:151-157 SKILL.md:157-158 SKILL.md:158-159 SKILL.md:159-165 SKILL.md:165-166 SKILL.md:166-167 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170-171 SKILL.md:171-172 SKILL.md:172-173 SKILL.md:173-174 SKILL.md:174-180 SKILL.md:180-181 SKILL.md:181-182 SKILL.md:182-183 SKILL.md:183-184 SKILL.md:184-185 SKILL.md:185-216 SKILL.md:216-224 SKILL.md:224-225 SKILL.md:225-232 SKILL.md:232-238 SKILL.md:238-250 SKILL.md:250-252 SKILL.md:252 SKILL.md:254-258 SKILL.md:258-265 SKILL.md:265-270 SKILL.md:270-271 SKILL.md:271-272 SKILL.md:272-273 SKILL.md:273-276 SKILL.md:276-280 SKILL.md:280-282 SKILL.md:282-288 SKILL.md:288-294 SKILL.md:294-296 SKILL.md:296-298 SKILL.md:298-302 SKILL.md:302-313 SKILL.md:313-325 SKILL.md:325-327 SKILL.md:327-340 SKILL.md:340-341 SKILL.md:341-342 SKILL.md:342-343 SKILL.md:343-344 SKILL.md:344-345 SKILL.md:345-349 SKILL.md:349-374 SKILL.md:374-380 SKILL.md:380-390 SKILL.md:390-394 SKILL.md:394-411 SKILL.md:411-415 SKILL.md:415-427 SKILL.md:427-431 SKILL.md:431-446 SKILL.md:446-450 SKILL.md:450-463 SKILL.md:463-467 SKILL.md:467-479 SKILL.md:479-484 SKILL.md:484-485 SKILL.md:485-486 SKILL.md:486-488 SKILL.md:488-499 SKILL.md:499-505 SKILL.md:505 SKILL.md:506 SKILL.md:59 SKILL.md:469 SKILL.md:57-75 SKILL.md:467-479 SKILL.md:475
🌐 网络访问 (3)
📁 文件系统访问 (23)
检测到的模式
Pipe to shell pattern×2
审计者: codex 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/dicklesworthstone-caam/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/dicklesworthstone-caam?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/dicklesworthstone-caam?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dicklesworthstone-caam/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/dicklesworthstone-caam.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
Dicklesworthstone. (2026). caam security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dicklesworthstone-caam/audits/8BibTeX 引用
@techreport{dicklesworthstone-dicklesworthstone-caam-2026,
author = {Dicklesworthstone},
title = {caam security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/dicklesworthstone-caam/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "caam security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "Dicklesworthstone"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/dicklesworthstone-caam/audits/8"
identifiers:
- type: other
value: "skillstore:dicklesworthstone-caam:audit:8"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
72
社区
78
规范符合性
你能构建什么
跟踪个人 AI CLI 配置文件
在本地保存的 Claude Code、Codex 或 Gemini 配置文件之间切换，并提供可见的状态检查。
分离工作和个人会话
使用隔离配置文件，将不同的 AI CLI 会话和本地主目录分开。
审查账号轮换工作流
在团队环境中采用 CAAM 之前，评估冷却时间、故障转移和配置文件健康行为。
试试这些提示
检查当前配置文件
使用 CAAM skill 解释我如何检查哪些 Claude Code 和 Codex 配置文件处于活动状态。
规划备份工作流
使用 CAAM skill 概述在切换账号之前保存新的本地 AI CLI 配置文件的安全步骤。
设计隔离会话
使用 CAAM skill 比较 vault profiles 和 isolated profiles，以运行独立的 Codex 会话。
评估轮换风险
使用 CAAM skill 识别自动配置文件轮换和故障转移中的安全与政策风险。
最佳实践
- 将 CAAM vaults 保持在本地，尽可能加密，并排除在备份或同步工具之外。
- 在使用账号切换或故障转移工作流之前，审查服务提供商条款和组织政策。
- 处理敏感项目或生产凭据时，优先使用手动配置文件激活。
避免
- 不要在未经验证的情况下，将远程安装脚本直接通过管道传入 shell。
- 不要使用账号轮换来在服务提供商速率限制阻止会话后继续工作。
- 不要在未经明确同意的情况下，将 SSH keys 或 Git configuration 暴露给生成的 profile homes。
常见问题
CAAM 管理什么？
它管理 Claude Code、Codex CLI 和 Gemini CLI 的本地身份验证配置文件工作流。
此 skill 是否包含 CAAM 程序？
不。该 skill 描述的是一个外部 Go CLI，并链接到该项目的安装方法。
OAuth tokens 是否敏感？
是。该 skill 指出，持有这些 bearer tokens 可能会授予账号访问权限。
CAAM 能否并行运行配置文件？
文档描述了可使用不同本地主目录运行独立 CLI 会话的隔离配置文件。
自动故障转移是否总是合适？
否。用户应在启用故障转移之前审查服务提供商限制、安全政策和账号规则。
最安全的安装方式是什么？
安装任何二进制文件或脚本之前，请使用已验证的发布版本，或检查源代码和校验和。
开发者详情
许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
72d5025b022c77f7a51bdf5c1637c689c80e89d1
维护新鲜度
2026/7/26
使用量
5 次下载 · 320 次浏览
文件结构
📄 SKILL.md
Dicklesworthstone 的更多技能
查看全部📦
planning-workflow
79规划智能体软件项目
大型 AI 编码项目在架构尚未明确时就开始实现，往往会失败。此技能提供一种规划工作流，用于创建详细的 Markdown 计划、进行模型评审以及完成任务交接。
编码与开发 查看
📦
bv
79使用图指标确定 Beads 工作优先级
团队手动阅读 issue 列表时，常常会漏掉阻塞项和循环依赖。此技能会将 Beads 数据转化为聚焦的分诊、规划和 agent 工作流指导。
效率 查看
📦
de-slopify
78润色 AI 编写的文档
AI 辅助生成的文档可能显得公式化，分散读者注意力。此 skill 指导进行手动编辑，去除常见的 LLM 写作痕迹，同时保留原意。
写作与内容 查看
📦
ui-ux-polish
78打磨 Web App 的 UI 和 UX
许多可正常运行的 Web App 在桌面端和移动端仍然显得不够均衡。这个技能为智能体提供一套迭代式打磨工作流，用于优化布局、状态和响应式细节。
设计与创意 查看
📦
beads-workflow
78将计划转换为 Beads 工作流
大型 markdown 计划很难让智能体团队一致地执行。此技能会将计划转换为详细的 Beads 任务，并包含依赖关系、审查循环和交接指导。
编码与开发 查看
相关技能
查看全部📦
ClickUp Integration Expert
75将路线图与 ClickUp 同步
由 AndresNaza
本地路线图数据可能会与 ClickUp 工作跟踪产生偏差。此技能会指导 MCP 设置、同步命令、映射规则和冲突处理。
效率 查看
📦
gmail-automation
69使用 Rube MCP 自动化 Gmail 工作流
由 sickn33
Gmail 工作通常需要在许多邮件中重复执行搜索、打标签、草拟和回复操作。此技能通过 Rube MCP 为 Claude、Codex 和 Claude Code 提供结构化的 Gmail 工作流。
效率 查看
📦
google-calendar-automation
69自动化 Google Calendar 日程安排
由 sickn33
手动协调日历耗时且容易造成日程安排错误。此技能指导 Claude、Codex 和 Claude Code 通过 Rube MCP 工作流处理 Google Calendar 事件、可用时间和参会者变更。
效率 查看
📦
writing-plans
79创建详细实施计划
由 obra
当需求没有拆解为清晰步骤时，复杂工作会有风险。此技能会将规格说明转化为面向测试的实施计划，适用于 Claude、Codex 和 Claude Code。
写作与内容 查看
📦
creating-agents
79创建 Claude Code 子代理
由 BrendanShields
团队经常需要用于审查、研究和领域工作的专注型代理。此技能提供了结构化流程和模板，用于创建带有作用域工具的 Claude Code 子代理。
编码与开发 查看
📦
slack-bot-builder
78使用 Bolt 构建 Slack 应用
由 sickn33
Slack 应用需要安全的事件处理、OAuth 流程和精致的交互式 UI。此技能将引导 Claude、Codex 和 Claude Code 使用 Bolt 模式、Block Kit 布局、命令、事件和安装工作流。
沟通 查看