360 Secure SkillHub
360 安全技能中心

repo-agent-brief

核心功能为识别仓库高信号上下文文件、推断技术栈与命令、生成精简仓库地图,并标记风险/敏感内容。适用于陌生仓库初接触、编码代理委托前、PR/分支交接、高风险文件操作前等场景。通过npx命令执行,支持Markdown、JSON等格式输出,可结合分支差异生成简报。

builtbyecho
builtbyecho
热度 61.27
最近更新 2026-05-28 07:58:10
分类:开发依赖:代码执行 / 读写文件 / 第三方 API应用场景:代码审查 / 自动化脚本 / DevOps

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add repo-agent-brief
Metadata
name
repo-agent-brief
description
Generate concise, safety-aware repository orientation briefs with @builtbyecho/repo-agent-brief/agent-brief before coding-agent work, reviews, handoffs, PR analysis, unfamiliar repo edits, diff-aware branch handoffs, or when an agent needs stack/commands/context/risk signals before changing files.

Repo Agent Brief Skill

Use @builtbyecho/repo-agent-brief to orient an agent before it edits or reviews a repository. It finds high-signal context files, infers stack/commands, builds a compact repo map, and flags obvious secret/risky-instruction patterns.

Default workflow

From the repository root:

npx @builtbyecho/repo-agent-brief . > AGENT_BRIEF.md
sed -n '1,220p' AGENT_BRIEF.md

For in-progress branches:

npx @builtbyecho/repo-agent-brief . --diff origin/main > AGENT_HANDOFF.md
sed -n '1,260p' AGENT_HANDOFF.md

For machine-readable automation:

npx @builtbyecho/repo-agent-brief . --format json > agent-brief.json

For durable handoffs:

npx @builtbyecho/repo-agent-brief . --diff HEAD --bundle
sed -n '1,220p' .agent-brief/brief.md
sed -n '1,160p' .agent-brief/verification.md

When to use

  • First pass in an unfamiliar repo.
  • Before delegating to a coding agent.
  • PR/branch handoff where changed files matter.
  • Safety preflight before touching CI, migrations, deploy scripts, auth, or config.

Safety

  • This is not a full secret scanner. Use Gitleaks/TruffleHog for full audits.
  • If high-risk patterns are found, inspect before proceeding.
  • Use --fail-on-high-risk in CI or strict agent workflows.
  • Generated briefs may include snippets from repo context files; avoid posting publicly without review.

Useful commands

npx @builtbyecho/repo-agent-brief .
npx @builtbyecho/repo-agent-brief . --diff HEAD
npx @builtbyecho/repo-agent-brief . --diff HEAD --bundle
npx @builtbyecho/repo-agent-brief . --diff origin/main --fail-on-high-risk
npx @builtbyecho/repo-agent-brief . --no-snippets