360 Secure SkillHub
360 安全技能中心

skill-sharer

核心功能:将本地技能发布到指定GitHub仓库,自动完成敏感信息脱敏(如IP、密钥、邮箱等)、生成技能专属README、更新仓库根索引README,最终提交推送。典型场景:开发者需公开分享Agent技能至Enterprise-Crew-skills仓库,无需手动处理敏感内容与文档。输入为本地技能文件夹路径及可选描述,支持交互式审核脱敏结果,输出为推送到GitHub的技能并返回对应URL。

h-mascot
h-mascot
热度 20.29
最近更新 2026-06-30 04:32:38
分类:自动化依赖:代码执行 / 读写文件 / 第三方 API应用场景:自动化脚本 / DevOps / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add skill-sharer
Metadata
name
skill-sharer
description
Share a skill publicly to the Enterprise-Crew-skills GitHub repo. Strips personal/security info, generates a README, and updates the repo index.

Skill Sharer

Publishes a local skill to /Enterprise-Crew-skills on GitHub.

What it does

  1. Copies the skill into a sanitized folder
  2. Strips personal information, secrets, IPs, paths, and credentials
  3. Generates a standalone README for the skill
  4. Updates the repo's root README with the new skill entry
  5. Commits and pushes

Usage

# Share a skill (interactive — reviews sanitization before pushing)
~/agent-workspace/skills/skill-sharer/scripts/share-skill.sh <skill-folder-path> [--description "Short description"]

Examples

# Share session-cleaner
~/agent-workspace/skills/skill-sharer/scripts/share-skill.sh ~/agent-workspace/scripts/session-cleaner/ --description "Converts session JSONL to clean markdown"

# Share a skill from the skills directory
~/agent-workspace/skills/skill-sharer/scripts/share-skill.sh ~/agent-workspace/skills/weather/ --description "Get weather forecasts with no API key"

Sanitization rules

The script strips:

  • IP addresses — Tailscale IPs, public IPs, local IPs (replaced with <REDACTED_IP>)
  • Paths with usernames — /home/user/, /home/user/ → generic paths
  • API keys and tokens — anything matching key/token/secret patterns
  • Email addresses — real emails replaced with user@example.com
  • SSH connection strings — ssh user@host → ssh user@<your-host>
  • Server URLs with real hosts — internal URLs replaced with placeholders
  • Secret file references — ~/agent-workspace/secrets/* → <YOUR_SECRET_FILE>
  • Tailscale hostnames — machine names replaced
  • Environment variable values — actual values stripped, variable names kept

Agent workflow

When Henry asks to share a skill:

  1. Identify the skill folder path
  2. Run share-skill.sh <path> --description "..."
  3. Review the sanitized output (script pauses for review)
  4. Confirm to push
  5. Report the GitHub URL to Henry

Repo structure

Enterprise-Crew-skills/
├── README.md              ← Root index (auto-updated)
├── session-cleaner/
│   ├── README.md
│   └── ...
├── new-skill/
│   ├── README.md
│   └── ...