技能 docs-sources

📦

docs-sources

Name: docs-sources
Author: Consiliency

內容修訂 r1 中風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

新增可靠的文件來源

當網站使用不同框架、sitemap 或 JavaScript 轉譯時，文件擷取經常失敗。此 skill 會引導 Claude、Codex 和 Claude Code 選擇策略並設定登錄項目。

支援: Claude Codex Code(CC)

📊 69 尚可

Maintain this Skill? Claim it 📊 69 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "docs-sources" from https://skillstore.io/skills/consiliency-docs-sources.md and its manifest at https://skillstore.io/api/skills/consiliency-docs-sources/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/consiliency-docs-sources.md 已簽名 manifest GET /api/skills/consiliency-docs-sources/manifest 已簽名 lockfile GET /api/skills/consiliency-docs-sources/lockfile

測試它

正在使用「docs-sources」。 Analyze docs for a React-based project with a public GitHub repo.

預期結果:

建議先偵測 GitHub raw 或 Docusaurus，然後在任何 web crawl 前檢查 sidebar 設定和 docs 路徑。

正在使用「docs-sources」。 Add docs for an API service that publishes an OpenAPI file.

預期結果:

識別 OpenAPI 策略、記錄規格 URL、將概念性文件保留為獨立來源，並建議驗證步驟。

正在使用「docs-sources」。 Curl returns a very small HTML shell for a docs page.

預期結果:

將網站分類為可能是 JavaScript 轉譯，然後建議只在測試 llms.txt、GitHub 和 sitemap 選項後才使用 browser crawl。

安全審計

中風險

v9 • 2026/7/13 開啟版本化報告

The audit confirms two medium risks: nested sitemap fetching and browser link navigation can reach attacker-selected destinations. Other alerts are safe examples, Markdown formatting, fixed URLs, localhost checks, or harmless redirection; no prompt injection was found.

已掃描檔案

1,514

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

中

cookbook/browser-strategy.md:81-86

Unchecked Browser Link Navigation

The browser workflow follows extracted links without scheme, origin, or private-network validation. A hostile documentation page can direct requests to unintended destinations.

Lines 81-86 pass each extracted link to the navigation wrapper. The workflow contains no destination validation step.

能力複核項目 (1)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

中

cookbook/sitemap-strategy.md:52

xargs command (can execute arbitrary commands)

xargs -I{} curl -s "{}" | grep -oP '(?<=<loc>)[^<]+'

The command sends URLs extracted from a remote sitemap directly to curl without scheme, host, or private-network validation. A hostile sitemap can trigger unintended requests.

風險因素

⚙️ 外部命令 (45)

🌐 網路存取 (50)

📁 檔案系統存取 (1)

cookbook/sitemap-strategy.md:29

審計單位: codex 檢視審計紀錄 →

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/consiliency-docs-sources/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/consiliency-docs-sources/security.svg)](https://skillstore.io/skills/consiliency-docs-sources?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/consiliency-docs-sources?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/consiliency-docs-sources/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/consiliency-docs-sources.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

Consiliency. (2026). docs-sources security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/consiliency-docs-sources/audits/9

BibTeX 引用

@techreport{consiliency-consiliency-docs-sources-2026,
  author = {Consiliency},
  title = {docs-sources security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/consiliency-docs-sources/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "docs-sources security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "Consiliency"
date-released: "2026-07-13"
url: "https://skillstore.io/skills/consiliency-docs-sources/audits/9"
identifiers:
  - type: other
    value: "skillstore:consiliency-docs-sources:audit:9"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 高

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

登錄新的文件來源

在檢查 llms.txt、GitHub、API 規格和 sitemap 後，選擇擷取策略並建立登錄項目。

稽核現有登錄項目

根據框架訊號、來源 URL、優先順序和備援策略比較目前項目。

改善代理程式文件擷取

標準化 Claude、Codex 和 Claude Code 在使用網頁爬取前探索高品質文件的方式。

試試這些提示

選擇策略

Use the docs-sources skill to inspect this documentation URL: [URL]. Recommend the best fetch strategy and explain the required checks.

建立登錄項目

Use docs-sources to draft a registry entry for [PROJECT] at [URL]. Include strategy, homepage, source paths, and priority.

診斷擷取失敗

Use docs-sources to analyze why curl returns incomplete content for [URL]. Recommend the next fallback and validation steps.

設計多來源方案

Use docs-sources to design a complete documentation ingestion plan for [STACK]. Include llms.txt, GitHub raw, API specs, sitemaps, and browser fallback.