360 Secure SkillHub
360 安全技能中心

Skill Sharer

该 Skill 通过 4 个 bash 脚本把本地 Skill 目录复制到脱敏副本,剥离 IP、含用户名的路径、密钥、邮箱、SSH 连接串、内部主机名与密钥文件引用等个人信息,再生成独立 README、更新仓库根索引,最后执行 git 提交与推送;推送前脚本暂停供人工复核。

h-mascot
h-mascot
热度 57.31
最近更新 2026-06-30 04:32:40
分类:自动化依赖:代码执行 / 读写文件 / 第三方 API应用场景:工作流 / 自动化脚本 / 模板

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add ec-skill-sharer
Metadata
name
skill-sharer
description
Share a skill publicly to the Enterprise-Crew-skills GitHub repo. Strips personal/security info, generates a README, and updates the repo index.

Skill Sharer

Publishes a local skill to henrino3/Enterprise-Crew-skills on GitHub.

What it does

  1. Copies the skill into a sanitized folder
  2. Strips personal information, secrets, IPs, paths, and credentials
  3. Generates a standalone README for the skill
  4. Updates the repo's root README with the new skill entry
  5. Commits and pushes

Usage

# Share a skill (interactive — reviews sanitization before pushing)
~/clawd/skills/skill-sharer/scripts/share-skill.sh <skill-folder-path> [--description "Short description"]

Examples

# Share session-cleaner
~/clawd/skills/skill-sharer/scripts/share-skill.sh ~/clawd/scripts/session-cleaner/ --description "Converts session JSONL to clean markdown"

# Share a skill from the skills directory
~/clawd/skills/skill-sharer/scripts/share-skill.sh ~/clawd/skills/weather/ --description "Get weather forecasts with no API key"

Sanitization rules

The script strips:

  • IP addresses — Tailscale IPs, public IPs, local IPs (replaced with <REDACTED_IP>)
  • Paths with usernames — /home/henrymascot/, /home/jamify/ → generic paths
  • API keys and tokens — anything matching key/token/secret patterns
  • Email addresses — real emails replaced with user@example.com
  • SSH connection strings — ssh user@host → ssh user@<your-host>
  • Server URLs with real hosts — internal URLs replaced with placeholders
  • Secret file references — ~/clawd/secrets/* → <YOUR_SECRET_FILE>
  • Tailscale hostnames — machine names replaced
  • Environment variable values — actual values stripped, variable names kept

Agent workflow

When Henry asks to share a skill:

  1. Identify the skill folder path
  2. Run share-skill.sh <path> --description "..."
  3. Review the sanitized output (script pauses for review)
  4. Confirm to push
  5. Report the GitHub URL to Henry

Repo structure

Enterprise-Crew-skills/
├── README.md              ← Root index (auto-updated)
├── session-cleaner/
│   ├── README.md
│   └── ...
├── new-skill/
│   ├── README.md
│   └── ...