技能 gaffa-support

📦

gaffa-support

Name: gaffa-support
Author: gaffaai

內容修訂 r1 中風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數

Troubleshoot Gaffa Skills and Prepare Support Reports

Gaffa skill failures can leave developers without a clear diagnosis or useful support evidence. This skill checks live documentation and prepares a local report for review.

支援: Claude Codex Code(CC)

📊 69 尚可

Maintain this Skill? Claim it 📊 69 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "gaffa-support" from https://skillstore.io/skills/gaffaai-gaffa-support.md and its manifest at https://skillstore.io/api/skills/gaffaai-gaffa-support/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/gaffaai-gaffa-support.md 已簽名 manifest GET /api/skills/gaffaai-gaffa-support/manifest 已簽名 lockfile GET /api/skills/gaffaai-gaffa-support/lockfile

測試它

正在使用「gaffa-support」。 My extraction fails on a large page. Help without submitting another request.

預期結果:

Likely cause: the extraction input may be too large.
Suggested next step: narrow the selected page region or set an input token cap.
No gaffa API request was submitted.

正在使用「gaffa-support」。 The problem remains unresolved. Prepare a report using my diagnostic log and generated script.

預期結果:

The report summarizes the problem, environment, prior troubleshooting, and two selected artifacts.
Credential fields were redacted, but script literals, URL tokens, and personal data still require review.
The timestamped Markdown report is saved in the working directory and shown for review.
After reviewing, email the file manually to support@gaffa.dev.

安全審計

中風險

v1 • 2026/10/14 開啟版本化報告

All 63 static alerts are false positives involving Markdown, API reference text, expected documentation access, or credential safeguards. One semantic finding covers incomplete redaction before reports are saved and displayed. No evidence found of malicious exfiltration or prompt injection; support reports require manual review and sending.

已掃描檔案

147

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

中

SKILL.md:61-66 SKILL.md:113-117

Incomplete Redaction Can Expose Report Secrets

The source warns that redaction can miss hard-coded keys, URL tokens, and personal data, then saves and displays the report. Known-key scrubbing also depends on an entropy floor, leaving some credential values unprotected outside recognized fields.

The file explicitly acknowledges missed secret formats and personal data before requiring persistence and inline display. Manual email prevents automatic exfiltration but does not prevent local or conversation exposure.

風險因素

⚙️ 外部命令 (47)

🌐 網路存取 (5)

SKILL.md:27 SKILL.md:38 SKILL.md:40 SKILL.md:72 SKILL.md:76

📁 檔案系統存取 (4)

SKILL.md:64 SKILL.md:100 SKILL.md:64 SKILL.md:116

🔑 環境變數 (6)

SKILL.md:22 SKILL.md:54 SKILL.md:56 SKILL.md:57 SKILL.md:59 SKILL.md:61

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/gaffaai-gaffa-support/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/gaffaai-gaffa-support/security.svg)](https://skillstore.io/skills/gaffaai-gaffa-support?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/gaffaai-gaffa-support?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gaffaai-gaffa-support/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/gaffaai-gaffa-support.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

gaffaai. (2026). gaffa-support security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/gaffaai-gaffa-support/audits/1

BibTeX 引用

@techreport{gaffaai-gaffaai-gaffa-support-2026,
  author = {gaffaai},
  title = {gaffa-support security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/gaffaai-gaffa-support/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gaffa-support security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "gaffaai"
date-released: "2026-10-14"
url: "https://skillstore.io/skills/gaffaai-gaffa-support/audits/1"
identifiers:
  - type: other
    value: "skillstore:gaffaai-gaffa-support:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Diagnose a Gaffa Skill Failure

Check current documentation against a failed skill workflow and receive a likely cause with a concrete next step.

Package Reproduction Evidence

Gather relevant scripts, reasoning logs, and request IDs into a reviewed report without submitting another browser request.

Prepare a Support Handoff

Summarize unresolved problems and prior troubleshooting in a local report that can be reviewed before contacting support.

試試這些提示

Describe a Problem

Use gaffa-support to help with this problem: [what I tried and what failed]. Check the documentation and suggest one next step.

Check an Error

Use gaffa-support to compare [error message] with current documentation. Explain the likely cause without calling the gaffa API.

Prepare a Local Report

Prepare a gaffa support report for [problem]. List relevant logs, [script filename], and [request IDs]. Let me exclude artifacts before writing.

Review Sensitive Evidence

Prepare a gaffa report from [artifacts]. Review URL tokens, script literals, and personal data. Flag redaction uncertainty and keep sending manual.

最佳實務

Provide a short problem statement, the skill involved, and relevant request IDs.
Exclude unrelated artifacts and review the report for secrets, URL tokens, and personal data before sending.
Delete reports after use or exclude them from version control.

避免

Treating best-effort redaction as a guarantee that every secret has been removed.
Expecting the skill to rerun browser requests or email reports automatically.
Assuming conversation details remain available after context compaction.

常見問題

Does this skill call the gaffa API?

No. It reads documentation and works with conversation context and local artifacts without submitting gaffa API requests.

Does troubleshooting spend gaffa credits?

The support workflow makes no gaffa API calls, so it does not spend gaffa credits.

Where is the report saved?

A timestamped gaffa-support Markdown report is saved in the current working directory and displayed for review.

Is the report sent automatically?

No. You review the report and email it manually to support@gaffa.dev.

Does redaction remove every secret?

No. Redaction can miss script literals, URL tokens, and personal data. Review the report before sharing it.

What happens if documentation is unavailable?

The skill reports the documentation failure and continues preparing a support report from available context and local artifacts.

開發者詳細資訊

作者

gaffaai

授權

MIT

Skillstore 修訂

版本提示

作者未聲明版本。

儲存庫

https://github.com/gaffaai/gaffa-for-ai/tree/0845e1324534d32032f946f53fc342b5e5212222/skills/gaffa-support

引用

01f3f4d6538d53a6ae331f737865d5ca93c90924

維護新鮮度

2026/10/15

使用量

0 次下載 · 0 次瀏覽

檔案結構

📁 agents/

📄 openai.yaml

📄 SKILL.md