技能 openspec-daem0n-bridge

📦

openspec-daem0n-bridge

Name: openspec-daem0n-bridge
Author: DasBluEyedDevil

內容修訂 r1 高風險 ⚙️ 外部命令📁 檔案系統存取

將 OpenSpec 工作流程與 Daem0n 記憶同步

當先前的需求與結果難以找到時，OpenSpec 決策可能會產生偏差。此技能會將規格、提案與已封存的變更連接到 Daem0n-MCP 記憶。

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "openspec-daem0n-bridge" from https://skillstore.io/skills/dasblueyeddevil-openspec-daem0n-bridge.md and its manifest at https://skillstore.io/api/skills/dasblueyeddevil-openspec-daem0n-bridge/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/dasblueyeddevil-openspec-daem0n-bridge.md 已簽名 manifest GET /api/skills/dasblueyeddevil-openspec-daem0n-bridge/manifest 已簽名 lockfile GET /api/skills/dasblueyeddevil-openspec-daem0n-bridge/lockfile

測試它

正在使用「openspec-daem0n-bridge」。 Sync specs to memory.

預期結果:

助理會回報已匯入的規格、擷取的規則數量、建立的記憶類別，以及解析期間發現的任何警告。

正在使用「openspec-daem0n-bridge」。 Check before proposing OAuth support.

預期結果:

助理會傳回相關規格、應遵循的模式、過往工作的警告、先前決策，以及需要確認的規則。

正在使用「openspec-daem0n-bridge」。 Record outcome for add-oauth-support.

預期結果:

助理會摘要已封存變更、記錄其是否有效、建立學習成果，並將其連結到提案決策。

安全審計

高風險

v8 • 2026/7/5 開啟版本化報告

Most static external command alerts are Markdown backtick false positives or MCP call examples. The real risks are narrow local shell reads of OpenSpec files and automatic persistence of project specification data into Daem0n memory.

已掃描檔案

420

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

高

SKILL.md:32-35 SKILL.md:71-87 SKILL.md:204-243

Automatic Persistence of Project Specifications

The skill instructs the agent to automatically import OpenSpec contents into Daem0n memory after detecting an openspec directory. This can persist confidential requirements and design context without a clear user approval step.

The auto-import trigger and remember_batch workflows are explicit. The main uncertainty is whether the configured Daem0n-MCP memory stays local or leaves the workspace.

能力複核項目 (4)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

中

SKILL.md:28-30

Ruby/shell backtick execution

```bash

This Bash block tells the agent to run ls during automatic OpenSpec detection. It is project-local and narrow, but it is real shell execution.

中

SKILL.md:52-54

Ruby/shell backtick execution

```bash

This Bash block lists OpenSpec spec directories as part of the import workflow. The command is fixed and local, but it still executes a shell command.

中

SKILL.md:57-59

Ruby/shell backtick execution

```bash

This Bash block reads spec.md files from discovered spec directories. The path is intended to be local, but placeholder substitution can expose unintended files if handled poorly.

中

SKILL.md:205-209

Ruby/shell backtick execution

```bash

This Bash block reads archived proposal and task files and lists archived spec directories. It is local, but it can expose private design details and uses a placeholder path.

風險因素

⚙️ 外部命令 (69)

SKILL.md:15-20 SKILL.md:20-24 SKILL.md:24-26 SKILL.md:26-28 SKILL.md:28-30 SKILL.md:30-38 SKILL.md:38-40 SKILL.md:40-52 SKILL.md:52-54 SKILL.md:54-57 SKILL.md:57-59 SKILL.md:59-65 SKILL.md:65 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:69-72 SKILL.md:72-87 SKILL.md:87-90 SKILL.md:90-97 SKILL.md:97-100 SKILL.md:100-104 SKILL.md:104-126 SKILL.md:126-131 SKILL.md:131-134 SKILL.md:134-138 SKILL.md:138-141 SKILL.md:141-146 SKILL.md:146-149 SKILL.md:149-153 SKILL.md:153-156 SKILL.md:156-177 SKILL.md:177-180 SKILL.md:180-192 SKILL.md:192-198 SKILL.md:198-205 SKILL.md:205-209 SKILL.md:209-212 SKILL.md:212-216 SKILL.md:216-220 SKILL.md:220-226 SKILL.md:226-229 SKILL.md:229-244 SKILL.md:244-247 SKILL.md:247-254 SKILL.md:254-258 SKILL.md:258-267 SKILL.md:267-268 SKILL.md:268-269 SKILL.md:269-270 SKILL.md:270-271 SKILL.md:271-272 SKILL.md:272-273 SKILL.md:273-279 SKILL.md:279-281 SKILL.md:281-282 SKILL.md:282-293 SKILL.md:293-308 SKILL.md:308-312 SKILL.md:312-317 SKILL.md:317-321 SKILL.md:321-334 SKILL.md:334-338 SKILL.md:338-399 SKILL.md:399-404 SKILL.md:404-411 SKILL.md:411-413 SKILL.md:413-417 SKILL.md:417-419

📁 檔案系統存取 (1)

SKILL.md:29

審計單位: codex 檢視審計紀錄 →

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/dasblueyeddevil-openspec-daem0n-bridge/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/dasblueyeddevil-openspec-daem0n-bridge/security.svg)](https://skillstore.io/skills/dasblueyeddevil-openspec-daem0n-bridge?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/dasblueyeddevil-openspec-daem0n-bridge?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dasblueyeddevil-openspec-daem0n-bridge/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/dasblueyeddevil-openspec-daem0n-bridge.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

DasBluEyedDevil. (2026). openspec-daem0n-bridge security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dasblueyeddevil-openspec-daem0n-bridge/audits/8

BibTeX 引用

@techreport{dasblueyeddevil-dasblueyeddevil-openspec-daem0n-bridge-2026,
  author = {DasBluEyedDevil},
  title = {openspec-daem0n-bridge security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/dasblueyeddevil-openspec-daem0n-bridge/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "openspec-daem0n-bridge security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "DasBluEyedDevil"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/dasblueyeddevil-openspec-daem0n-bridge/audits/8"
identifiers:
  - type: other
    value: "skillstore:dasblueyeddevil-openspec-daem0n-bridge:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

匯入現有規格

在開始實作工作之前，將目前的 OpenSpec 需求同步到記憶中。

準備更安全的提案

在起草新提案之前，檢閱相關規格、警告與過往決策。

擷取已封存結果

將已完成的 OpenSpec 變更轉換為可供未來規劃重複使用的學習成果。

試試這些提示

匯入規格

Sync the OpenSpec specs in this repository to Daem0n memory and summarize what was imported.

重新整理記憶

Refresh the OpenSpec memory for this project and tell me which rules, warnings, and patterns changed.

檢查提案脈絡

Before I propose the [feature] change, recall relevant OpenSpec memories, rules, warnings, and past decisions.

記錄已封存變更

Record the outcome for archived OpenSpec change [change-id], create learnings, and link them to the original decision memory.

最佳實務

在依賴已儲存的記憶進行規劃之前，先檢閱匯入摘要。
使用清楚的 OpenSpec change ids，讓提案與封存記錄保持連結。
在將規格或已封存結果儲存到記憶之前，先遮蔽機密細節。

避免

未經核准，請勿將私人規格匯入共享記憶。
OpenSpec 檔案變更後，請勿依賴過時的記憶。
請勿將記住的規則視為閱讀目前規格的替代方案。

常見問題

此技能會連接什麼？

它會將 OpenSpec 規格和變更工作流程與 Daem0n-MCP 記憶記錄連接起來。

它會建立 OpenSpec 檔案嗎？

不會。它會讀取現有的 OpenSpec 檔案，並將相關脈絡儲存在記憶中。

它能在撰寫提案之前提供協助嗎？

可以。它會回想與該功能相關的規格、警告、規則與過往決策。

它需要 Daem0n-MCP 嗎？

需要。文件化的工作流程依賴 Daem0n-MCP 記憶工具。

使用前我應該檢閱什麼？

在將 OpenSpec 檔案匯入持久記憶之前，請檢閱它們是否包含機密需求。

它能記錄已完成的變更嗎？

可以。它能將已封存的 OpenSpec 變更轉換為學習成果，並將其連結到較早的決策。

開發者詳細資訊

作者

DasBluEyedDevil

授權

MIT

Skillstore 修訂

版本提示

作者未聲明版本。

儲存庫

https://github.com/DasBluEyedDevil/Daem0n-MCP/tree/main/.claude/skills/openspec-daem0n-bridge

引用

7e9e368dc1a370f2040369ebcd0db06d90cb48e5

維護新鮮度

2026/7/18

使用量

4 次下載 · 261 次瀏覽

檔案結構

📄 SKILL.md