技能 command-optimization

📦

command-optimization

Name: command-optimization
Author: Joseph OBrien

v1.0.1 內容修訂 r1 中風險 ⚙️ 外部命令

設計更好的 CLI 指令

CLI 指令經常變得不一致、不清楚或難以維護。此技能可協助 Claude、Codex 和 Claude Code 設計易用的指令、引數、錯誤處理與文件。

支援: Claude Codex Code(CC)

📊 70 尚可

Maintain this Skill? Claim it 📊 70 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "command-optimization" from https://skillstore.io/skills/89jobrien-command-optimization.md and its manifest at https://skillstore.io/api/skills/89jobrien-command-optimization/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/89jobrien-command-optimization.md 已簽名 manifest GET /api/skills/89jobrien-command-optimization/manifest 已簽名 lockfile GET /api/skills/89jobrien-command-optimization/lockfile

測試它

正在使用「command-optimization」。 Create a command for generating React components.

預期結果:

以任務為核心的指令名稱，並明確指定元件目標。
針對路徑、元件類型、測試與樣式的建議選項。
針對缺少名稱與無效輸出路徑的驗證指引。

正在使用「command-optimization」。 Improve a vague dependency check command.

預期結果:

更清楚的指令名稱，明確說明分析目標。
摘要與詳細結果的輸出格式選項。
可採取行動的錯誤訊息與下一步建議。

正在使用「command-optimization」。 Create a slash command template for project cleanup.

預期結果:

用於描述、引數提示與工具限制的 frontmatter 欄位。
包含目前狀態、任務步驟與最終輸出的結構化工作流程。
針對任何動態 shell 情境的安全提醒。

安全審計

中風險

v7 • 2026/7/5 開啟版本化報告

Most static findings in SKILL.md are false positives from Markdown fences, inline option names, and documented examples. The reference template contains real slash-command dynamic context using shell commands that execute when copied into a command. No prompt injection, data exfiltration intent, or malicious command content was found.

已掃描檔案

402

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

中

references/slash-command.template.md:24-25 references/slash-command.template.md:74-80

Load-Time Shell Execution in Slash Command Template

The slash command template tells users to use dynamic context shell commands that execute when a command loads. This can run local commands if a generated command keeps unsafe dynamic context or accepts unreviewed shell placeholders.

The file explicitly states that dynamic context shell commands execute when the command loads. The examples are read-only, so the risk is contextual rather than evidence of malicious intent.

能力複核項目 (2)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

中

references/slash-command.template.md:79-80

Ruby/shell backtick execution

- Current branch: !`git branch --show-current`

The reference documents slash-command dynamic context with shell commands that execute when a command loads. The examples are benign, but the pattern enables load-time external command execution in generated commands.

中

references/slash-command.template.md:80-81

Ruby/shell backtick execution

- File count: !`find . -name "*.py" | wc -l`

審計單位: codex 檢視審計紀錄 →

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/89jobrien-command-optimization/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/89jobrien-command-optimization/security.svg)](https://skillstore.io/skills/89jobrien-command-optimization?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/89jobrien-command-optimization?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/89jobrien-command-optimization/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/89jobrien-command-optimization.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

Joseph OBrien. (2026). command-optimization security audit report (audit version 7) [Author version 1.0.1]. Skillstore. https://skillstore.io/skills/89jobrien-command-optimization/audits/7

BibTeX 引用

@techreport{joseph-obrien-89jobrien-command-optimization-2026,
  author = {Joseph OBrien},
  title = {command-optimization security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/89jobrien-command-optimization/audits/7},
  note = {Author version 1.0.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "command-optimization security audit report (audit version 7)"
version: "1.0.1"
type: report
authors:
  - name: "Joseph OBrien"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/89jobrien-command-optimization/audits/7"
identifiers:
  - type: other
    value: "skillstore:89jobrien-command-optimization:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 高

架構

100

可維護性

內容

社群

100

規範符合度

你可以打造什麼

建立開發者指令

設計新的專案指令，包含清楚的用法、選項、範例與驗證規則。

改善現有 CLI 工作流程

審查令人困惑的指令，並改善名稱、旗標、回饋與錯誤訊息。

標準化斜線指令範本

撰寫可重複使用的斜線指令結構，包含 frontmatter、引數、工作流程步驟與輸出格式。

試試這些提示

撰寫基本指令

Create a simple CLI command for [task]. Include the command name, purpose, required arguments, optional flags, and one usage example.

改善指令介面

Review this command: [command]. Improve the name, arguments, options, help text, validation, and error messages.

建立安全的斜線指令範本

Design a slash command template for [workflow]. Include frontmatter, arguments, workflow steps, output format, and safety notes for any dynamic context.

設計指令套件

Create a command suite for [project workflow]. Define consistent command names, shared options, validation rules, dry-run behavior, and documentation structure.