Security audit
Security checks for vulnerabilities and agentic risk
This is a local output-formatting skill with broad presentation defaults and optional persistent setup, but the sensitive behavior is disclosed and gated on user consent.
Install only if you want a broad default formatter for AI responses. Review before allowing it to write MCP configuration or permanent memory, and use a scoped install target instead of global mode unless you want it available across many agents. For stricter supply-chain control, pin or review the npm package version before using npx.
install_to() {
mkdir -p "$1/$SKILL_NAME"
cp -r "$SOURCE_DIR/." "$1/$SKILL_NAME/"
rm -rf "$1/$SKILL_NAME/.git"
echo "installed -> $1/$SKILL_NAME"
}const AGENT_DIRS = {
claude: { label: 'Claude Code', dirs: ['.claude/skills'] },
cursor: { label: 'Cursor', dirs: ['.cursor/skills', '.agents/skills'] },
codex: { label: 'Codex', dirs: ['.codex/skills'] }, // 特判：$CODEX_HOME/skills
gemini: { label: 'Gemini CLI', dirs: ['.gemini/skills', '.agents/skills'] },
goose: { label: 'Goose', dirs: ['.config/goose/skills', '.agents/skills'] },
amp: { label: 'Amp', dirs: ['.config/agents/skills', '.agents/skills'] },echo "完成。"; return
fi
local installed=0 d
for d in .claude/skills .cursor/skills .codex/skills .config/goose/skills .config/agents/skills .opencode/skills .codeium/windsurf/skills .workbuddy/skills .kiro/skills .traecli/skills .gemini/skills .trae-cn/skills .qwen/skills .comate/skills .codebuddy/skills .kimi/skills .agents/skills; do
if [ -d "$d" ]; then install_to "$d"; installed=1; fi
done
if [ "$installed" = "0" ]; thenNo suspicious patterns detected.