360 Secure SkillHub
360 安全技能中心

doc-bridge-handoff

核心功能:编辑含doc-bridge.config.json的仓库前,先解析匹配变更的包/所有权ID,读取指定前置文档,限定变更在许可目录内,执行检查,文档变更则更新索引。典型场景:需修改含doc-bridge配置的代码仓库时。输入为代码变更请求,输出合规变更或边界问题报告。工具仅做只读解析,不授权编辑,跨平台支持多种运行时。

emersonbraun
emersonbraun
热度 7.64
最近更新 2026-08-12 07:37:36
分类:开发依赖:MCP 服务 / 代码执行应用场景:代码审查 / documentation / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add doc-bridge-handoff
Metadata
name
doc-bridge-handoff
description
Resolve Doc Bridge boundaries before changing code.
version
1.0.0
author
AgentsKit
license
MIT
platforms
["darwin","linux","windows"]
metadata
{"hermes":{"tags":["documentation","coding-agents","repository-routing"]}}

Doc Bridge handoff

Use this skill before editing a repository that contains doc-bridge.config.json.

  1. Resolve the package or ownership id that best matches the requested change:
    • Prefer the read-only MCP tool handoff.resolve when it is available.
    • Otherwise run node <skill-directory>/scripts/resolve-handoff.mjs <id> from the repository.
  2. Read every file in readBeforeEditing, beginning with startHere.
  3. Keep changes inside editRoots. If the requested path is not covered, stop and report the missing route instead of guessing.
  4. Make the smallest change that satisfies the request.
  5. Run every command in checks before claiming completion.
  6. If documentation changed, refresh the Doc Bridge index and run its gate.

If resolution fails, returns incomplete fields, or names an unknown target, stop. Do not infer edit permission from repository layout.

The resolver and MCP tools are read-only. They resolve project guidance but never authorize edits, publish changes, execute returned checks, or replace repository instructions. The skill uses no credentials and has no provider, hosted service, or AKOS dependency.

Portable runtimes

This directory follows the open Agent Skills layout: one SKILL.md plus optional scripts and fixtures. It can be loaded as a local skill by OpenClaw-compatible clients, Hermes Agent, Pi, Cursor, or another runtime that supports Agent Skills and shell execution. Runtime-specific publication metadata is intentionally kept outside the skill.