技能 improve-skill

📦

improve-skill

Name: improve-skill
Author: Dwsy

內容修訂 r1 高風險 ⚙️ 外部命令📁 檔案系統存取

從代理程式工作階段改善技能

技能作者需要來自真實代理程式工作階段的明確證據。此技能會擷取逐字稿，並將其轉換為用於改善或建立技能的提示。

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "improve-skill" from https://skillstore.io/skills/dwsy-improve-skill.md and its manifest at https://skillstore.io/api/skills/dwsy-improve-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/dwsy-improve-skill.md 已簽名 manifest GET /api/skills/dwsy-improve-skill/manifest 已簽名 lockfile GET /api/skills/dwsy-improve-skill/lockfile

測試它

正在使用「improve-skill」。使用我最新的 Codex 工作階段改善部署技能。

預期結果:

可讀的逐字稿摘要、技能缺口清單，以及用於在新工作階段更新技能的提示。

正在使用「improve-skill」。從成功的除錯工作階段建立新技能。

預期結果:

建議的技能重點、關鍵工作流程步驟、常見陷阱，以及範例使用指南。

正在使用「improve-skill」。檢視代理程式不斷重試命令的工作階段。

預期結果:

針對混淆點、缺少的範例，以及給未來代理程式的更清楚指示所做的聚焦分析。

安全審計

高風險

v7 • 2026/7/5 開啟版本化報告

The shell-execution findings are false positives caused by JavaScript template literals and Markdown backticks. The remaining risk is legitimate filesystem access to hidden agent session and skill directories. Raw transcript reuse also lacks redaction and prompt-injection controls.

已掃描檔案

506

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (2)

高

SKILL.md:60-88 SKILL.md:101-135

Raw Session Transcript Reuse Can Carry Prompt Injection

The workflow tells users to paste the extracted transcript into a fresh agent session. Untrusted session text can include instructions that steer the new agent unless isolated and reviewed.

The cited prompt templates embed a session transcript into a new agent workflow with no instruction to treat transcript text as untrusted data. This is a common prompt-injection transfer path.

高

scripts/extract-session.js:322-343 SKILL.md:48-50 SKILL.md:94-96

Sensitive Agent Session Data Is Extracted Without Redaction

The script reads local agent session files and prints message content. The documentation also suggests saving the transcript in /tmp, which may expose secrets or private project data.

The script reads the selected session file and prints the formatted transcript, while the documentation redirects output to a temporary file. I found no redaction or secret scanning step in the cited workflow.

能力複核項目 (26)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

scripts/extract-session.js:322

Node.js fs operations

const content = fs.readFileSync(result.path, 'utf8');

The script reads the selected agent session file and later prints its transcript. Session files can contain sensitive prompts, code, and tool results.

高

SKILL.md:40

Hidden file in home directory

- **Claude Code**: `~/.claude/projects/<encoded-cwd>/*.jsonl`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

高

SKILL.md:41

Hidden file in home directory

- **Pi**: `~/.pi/agent/sessions/<encoded-cwd>/*.jsonl`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

高

SKILL.md:42

Hidden file in home directory

- **Codex**: `~/.codex/sessions/YYYY/MM/DD/*.jsonl`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

高

SKILL.md:54

Hidden file in home directory

- `~/.codex/skills/<skill-name>/SKILL.md`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

高

SKILL.md:55

Hidden file in home directory

- `~/.claude/skills/<skill-name>/SKILL.md`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

高

SKILL.md:56

Hidden file in home directory

- `~/.pi/agent/skills/<skill-name>/SKILL.md`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

高

SKILL.md:118

Hidden file in home directory

Write the skill to: ~/.codex/skills/<skill-name>/SKILL.md

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

中

scripts/extract-session.js:53

Node.js fs operations

const files = fs.readdirSync(dir)

The script enumerates local agent session directories to find transcripts. The behavior is documented, but it accesses sensitive local history.

中

scripts/extract-session.js:77

Node.js fs operations

for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {

The script enumerates local agent session directories to find transcripts. The behavior is documented, but it accesses sensitive local history.

中

scripts/extract-session.js:96

Node.js fs operations

const firstLine = fs.readFileSync(session.path, 'utf8').split('\n')[0];

The script reads Codex session files while searching for the matching working directory. This is local and intended, but it touches sensitive agent history.

中

SKILL.md:40

Hidden file access

- **Claude Code**: `~/.claude/projects/<encoded-cwd>/*.jsonl`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

中

SKILL.md:41

Hidden file access

- **Pi**: `~/.pi/agent/sessions/<encoded-cwd>/*.jsonl`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

中

SKILL.md:42

Hidden file access

- **Codex**: `~/.codex/sessions/YYYY/MM/DD/*.jsonl`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

中

SKILL.md:54

Hidden file access

- `~/.codex/skills/<skill-name>/SKILL.md`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

中

SKILL.md:55

Hidden file access

- `~/.claude/skills/<skill-name>/SKILL.md`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

中

SKILL.md:56

Hidden file access

- `~/.pi/agent/skills/<skill-name>/SKILL.md`

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

中

SKILL.md:118

Hidden file access

Write the skill to: ~/.codex/skills/<skill-name>/SKILL.md

No specific safe context was identified for this static finding, so it is kept for review with low confidence.

中

SKILL.md:50

Temp directory access

./scripts/extract-session.js > /tmp/session-transcript.txt

The documentation suggests writing full session transcripts to /tmp. Temporary files can expose sensitive transcript content to other local processes or users.

中

SKILL.md:96

Temp directory access

./scripts/extract-session.js > /tmp/session-transcript.txt

The documentation suggests writing full session transcripts to /tmp. Temporary files can expose sensitive transcript content to other local processes or users.

低

scripts/extract-session.js:51

Node.js fs stat operations

if (!fs.existsSync(dir)) return null;

The script checks local paths and file metadata while locating session transcripts. This is expected for the tool, but it still observes hidden session storage.

低

scripts/extract-session.js:58

Node.js fs stat operations

mtime: fs.statSync(path.join(dir, f)).mtime

The script checks local paths and file metadata while locating session transcripts. This is expected for the tool, but it still observes hidden session storage.

低

scripts/extract-session.js:70

Node.js fs stat operations

if (!fs.existsSync(baseDir)) return null;

The script checks local paths and file metadata while locating session transcripts. This is expected for the tool, but it still observes hidden session storage.

低

scripts/extract-session.js:76

Node.js fs stat operations

if (!fs.existsSync(dir)) return;

The script checks local paths and file metadata while locating session transcripts. This is expected for the tool, but it still observes hidden session storage.

低

scripts/extract-session.js:84

Node.js fs stat operations

mtime: fs.statSync(fullPath).mtime

The script checks local paths and file metadata while locating session transcripts. This is expected for the tool, but it still observes hidden session storage.

低

scripts/extract-session.js:267

Node.js fs stat operations

if (!fs.existsSync(sessionPath)) {

The script checks local paths and file metadata while locating session transcripts. This is expected for the tool, but it still observes hidden session storage.

風險因素

⚙️ 外部命令 (34)

📁 檔案系統存取 (28)

審計單位: codex 檢視審計紀錄 →

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/dwsy-improve-skill/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/dwsy-improve-skill/security.svg)](https://skillstore.io/skills/dwsy-improve-skill?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/dwsy-improve-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dwsy-improve-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/dwsy-improve-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

Dwsy. (2026). improve-skill security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dwsy-improve-skill/audits/7

BibTeX 引用

@techreport{dwsy-dwsy-improve-skill-2026,
  author = {Dwsy},
  title = {improve-skill security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/dwsy-improve-skill/audits/7},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "improve-skill security audit report (audit version 7)"
version: "unspecified"
type: report
authors:
  - name: "Dwsy"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/dwsy-improve-skill/audits/7"
identifiers:
  - type: other
    value: "skillstore:dwsy-improve-skill:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

改善現有技能

檢視真實代理程式工作階段，並找出目前技能缺少的指示、範例與修正。

建立可重複使用的技能

將成功的編碼工作階段轉換為其他代理程式可遵循的可重複使用工作流程。

記錄代理程式工作流程經驗

從工作階段歷史記錄中擷取重複的失敗、因應方法與成功模式，供團隊檢視。

試試這些提示

找出技能缺口

使用 improve-skill 擷取我目前的工作階段，並列出我使用的技能中最重要的缺失指示。

草擬改善提示

分析此專案最新的 Claude Code 工作階段，並為現有技能草擬一個精簡的改善提示。

使用特定工作階段

使用這個特定的 Codex 工作階段檔案，找出應加入我的技能的範例、修正與警告。

優先處理安全的技能變更

將逐字稿與目前技能進行比較，並產生一份包含遮蔽註記與風險檢查的優先編輯計畫。

最佳實務

在與另一個代理程式分享逐字稿之前，先檢查是否包含祕密。
使用明確的技能路徑，並在編輯前確認目標技能。
讓改善提示聚焦於觀察到的失敗與成功模式。

避免

不要將原始生產環境祕密或私人客戶資料貼到新的工作階段中。
未經同意，不要在共用機器上執行逐字稿擷取。
不要將生成的改善提示視為已審查的技能變更。

常見問題

此技能支援哪些工作階段格式？

它支援此技能所記錄的 Claude Code、Pi 與 Codex JSONL 工作階段檔案。

它會自動編輯技能嗎？

否。它協助生成提示與工作流程，用來引導另一個技能編輯工作階段。

它可以使用特定的工作階段檔案嗎？

可以。當自動偵測不足時，擷取器可接受明確的工作階段路徑。

它會遮蔽敏感資料嗎？

否。使用者應先檢視並遮蔽逐字稿，再將其複製到另一個代理程式工作階段。

為什麼它使用新的工作階段？

新的工作階段可讓改善任務聚焦於逐字稿與目標技能。

它對私人儲存庫安全嗎？

請謹慎使用。工作階段逐字稿可能包含私人程式碼、路徑、命令與工具輸出。

開發者詳細資訊

作者

Dwsy

授權

MIT

Skillstore 修訂

版本提示

作者未聲明版本。

儲存庫

https://github.com/Dwsy/agent/tree/main/skills/improve-skill

引用

c579efd02184f1128d6741d16e6c8d951d7d4208

維護新鮮度

2026/7/18

使用量

6 次下載 · 217 次瀏覽

檔案結構

📁 scripts/

📄 extract-session.js

建立可重複使用的 AI 技能

由 vercel-labs

團隊需要一致的方法來封裝可重複使用的代理知識與工作流程。此技能會引導 Claude、Codex 和 Claude Code 完成技能規劃、撰寫、驗證與封裝。

程式開發查看

improve-skill

使用我的智慧代理安裝

Agent 可讀資源

測試它

安全審計

已確認的安全問題 (2)

風險因素

複製報告連結

Markdown 徽章

HTML 徽章

嵌入卡片

APA 引用

BibTeX 引用

CITATION.cff

Skillstore 評分

你可以打造什麼

改善現有技能

建立可重複使用的技能

記錄代理程式工作流程經驗

試試這些提示

最佳實務

避免

常見問題

開發者詳細資訊

Dwsy 的更多技能

project-planner

svg-logo-generator

context7

system-design

ast-grep

ai-runtime-memory

相關技能

improving-components

building-agents

agent-development

building-commands

analyzing-component-quality

skill-creator