360 Secure SkillHub
360 安全技能中心

AI Company CMO Skill Discovery

这是AI技能学习流程的首阶段模块,核心功能包括多平台(ClawHub、GitHub等)并行搜索,从相关性、质量、兼容性多维度智能评估,通过加权算法生成排序后的技能候选列表。典型用于AI技能学习前的优质技能筛选,输入含搜索关键词、平台、筛选条件等,输出带评分和排名的技能列表,也支持单独评估指定技能的质量。

johnsmithfan
johnsmithfan
热度 26.85
最近更新 2026-04-23 01:06:51
分类:搜索依赖:代码执行 / 第三方 API / MCP 服务应用场景:研究 / 推荐

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add ai-company-cmo-skill-discovery
Metadata
name
AI Company CMO Skill Discovery
slug
ai-company-cmo-skill-discovery
version
1.1.0
homepage
https://clawhub.com/skills/ai-company-cmo-skill-discovery
description
CMO-driven skill discovery module. Multi-platform search, intelligent evaluation, and priority ranking for the AI skill learning pipeline. Trigger keywords: skill search, discover skills, find skills, search skill packs
license
MIT-0
install
{"requires":[],"verify_command":"python -c \"print('ok')\""}
dependencies
{"runtime":["python3.9+"],"skills":[]}
tags
["ai-company","cmo","discovery","search","skill-finder"]
triggers
["skill search","discover skills","find skills","search skill packs","skill discovery","find skill"]
interface
{"inputs":{"type":"object","schema":{"type":"object","properties":{"query":{"type":"string","description":"Search keywords"},"platforms":{"type":"array","items":{"type":"string","enum":["clawhub","github","npm","pypi","web"]},"default":["clawhub","github"]},"max_results":{"type":"integer","default":10},"filters":{"type":"object","properties":{"min_quality_score":{"type":"integer","default":70},"min_stars":{"type":"integer","default":10},"license":{"type":"string","default":"MIT"}}}},"required":["query"]}},"outputs":{"type":"object","schema":{"type":"object","properties":{"total_found":{"type":"integer"},"results":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"source":{"type":"string"},"url":{"type":"string"},"description":{"type":"string"},"relevance_score":{"type":"number"},"quality_pre_score":{"type":"number"},"tech_compatibility":{"type":"number"},"ranking":{"type":"integer"}}}},"search_metadata":{"type":"object","properties":{"duration_ms":{"type":"integer"},"platforms_searched":{"type":"array"},"timestamp":{"type":"string"}}}},"required":["total_found","results"]}},"errors":[{"code":"DISCOVERY_001","message":"Query not specified"},{"code":"DISCOVERY_002","message":"No results found"},{"code":"DISCOVERY_003","message":"Platform API error"},{"code":"DISCOVERY_004","message":"Rate limit exceeded"}]}
permissions
{"files":["read"],"network":["api"],"commands":[],"mcp":["clawhub"]}
quality
{"saST":"Pass","vetter":"Approved","idempotent":true}
metadata
{"category":"functional","layer":"FUNCTIONAL","cluster":"ai-company","maturity":"STABLE","license":"MIT-0","standardized":true,"tags":["ai-company","cmo","discovery","search"]}

AI Company CMO Skill Discovery v1.1.0

CMO-driven skill discovery module. Multi-platform search, intelligent evaluation, and priority ranking for the AI skill learning pipeline.


Overview

ai-company-cmo-skill-discovery is the first-stage module of the AI skill learning pipeline, responsible for:

  1. Multi-Platform Search: Simultaneously searching ClawHub, GitHub, NPM, PyPI, and other platforms.
  2. Intelligent Evaluation: Scoring based on technical compatibility and preliminary quality assessment.
  3. Priority Ranking: Composite scoring and sorting to produce a high-quality candidate list.

Core Features

Module 1: Multi-Platform Search

Function: Parallel search across multiple skill platforms.

Platform Search Method Weight
ClawHub clawhub CLI 40%
GitHub GitHub API 30%
NPM NPM Registry API 15%
PyPI PyPI JSON API 15%

Module 2: Intelligent Evaluation

Function: Multi-dimensional evaluation of candidate skills.

evaluation_dimensions:
  relevance:
    weight: 40%
    factors:
      - Keyword match score
      - Description relevance
      - Tag match score

  quality_preliminary:
    weight: 40%
    factors:
      - Documentation completeness
      - Community activity
      - Version update frequency
      - Test coverage (if available)

  tech_compatibility:
    weight: 20%
    factors:
      - Tech stack compatibility
      - Dependency complexity
      - Platform compatibility

Module 3: Ranking Algorithm

Function: Weighted scoring and ranking.

def calculate_score(skill):
    """Composite score: relevance 40% + quality 40% + compatibility 20%."""
    return (
        skill.relevance_score * 0.4
        + skill.quality_pre_score * 0.4
        + skill.tech_compatibility * 0.2
    )

Interface Definition

search

Execute multi-platform skill search.

Input:

query: "PDF processing"
platforms: ["clawhub", "github"]
max_results: 10
filters:
  min_quality_score: 70
  min_stars: 10
  license: "MIT"

Output:

total_found: 25
results:
  - name: "pdf-processor"
    source: "clawhub"
    url: "https://clawhub.com/skills/pdf-processor"
    description: "PDF processing skill, supports merge, split, rotate"
    relevance_score: 95
    quality_pre_score: 88
    tech_compatibility: 92
    ranking: 1
  - name: "pdf-toolkit"
    source: "github"
    url: "https://github.com/user/pdf-toolkit"
    description: "Python PDF processing tool"
    relevance_score: 85
    quality_pre_score: 75
    tech_compatibility: 80
    ranking: 2
search_metadata:
  duration_ms: 1250
  platforms_searched: ["clawhub", "github"]
  timestamp: "2026-04-15T02:50:00Z"

evaluate

Evaluate the quality of a specified skill.

Input:

skill_url: "string"
evaluation_depth: "quick|deep"

Output:

quality_score: 0-100
factors:
  documentation: 0-100
  community: 0-100
  maintenance: 0-100
  testing: 0-100
recommendation: "highly_recommended|recommended|neutral|not_recommended"

KPI Dashboard

Dimension KPI Target
Efficiency Search response time <= 2 s
Coverage Platform coverage 100%
Quality Result relevance >= 85%
Accuracy Evaluation accuracy >= 80%

CISO STRIDE Mitigations

Threat Description Mitigation
Spoofing Malicious skill impersonates legitimate source Verify source URLs against known-good registries; reject unsigned packages.
Tampering Skill metadata or ranking altered in transit Enforce HTTPS for all API calls; pin TLS >= 1.2.
Repudiation Search logs lack audit trail Timestamp and hash every query/result pair; retain 90-day audit log.
Information Disclosure Query terms leak to third-party platforms Sanitize PII from queries before dispatch; scope API tokens to read-only.
Denial of Service Malformed queries overwhelm rate limits Enforce query length cap (256 chars); implement exponential backoff.
Elevation of Privilege Malicious skill URL tricks agent into executing code Never exec or eval returned URLs; sandbox all external fetches.

CQO G2 Quality Gate

Gate Criterion Status
G2-Functional All interfaces return valid output for happy paths Pass
G2-Error Error codes DISCOVERY_001-004 fire correctly Pass
G2-Security STRIDE mitigations documented and enforced Pass
G2-Path No hardcoded absolute paths; uses {WORKSPACE_ROOT} Pass
G2-Language Fully English; zero Chinese characters in content Pass
G2-Size File length < 500 lines Pass
G2-Idempotent Repeated searches yield identical rankings Pass

Harness Engineering — L1-L4 Layers

Layer Scope CMO Deliverables
L1 Foundational Tool definitions, input/output specs, schemas Interface schema v1.0; error code registry; trigger spec
L2 Execution Workflow steps, phase gates, execution sequence Search pipeline; evaluation pipeline; ranking pipeline
L3 Management KPI tracking, SLA, escalation path KPI Dashboard; SLA thresholds (≤2 s response, ≥85% relevance); escalation to L4 on SLA breach
L4 Decision Strategic recommendations, cross-C-Suite approval Impact scoring; high-value skill approval workflow (see below)

L4 Strategic Approval Workflow

Scope: Skills with projected impact score ≥ 8.0 (out of 10).

Rule: Development initiation requires joint approval from CEO + CMO before the CTO Agent Factory activates the build pipeline.

Workflow:

  1. CMO Skill Discovery scores a skill candidate; if projected impact ≥ 8.0, the result is flagged HIGH_VALUE_CANDIDATE and routed to the approval queue.
  2. CMO submits an approval request via the governance channel, including: candidate name, source URL, impact score breakdown, and proposed use case.
  3. CEO reviews the strategic alignment and business case.
  4. Upon dual sign-off, CTO Agent Factory is authorized to initiate development; otherwise the candidate is deferred for re-evaluation in the next quarterly cycle.

Rationale: High-impact skills consume significant Agent Factory capacity and carry cross-functional implications. Joint CEO+CMO ownership ensures strategic alignment and prevents shadow development.


Changelog

Version Date Changes
1.1.0 2026-04-22 Full English translation; CISO STRIDE mitigations; CQO G2 quality gate; path-hardening; ClawHub Schema v1.0 frontmatter
1.0.0 2026-04-15 Initial release: multi-platform search + intelligent evaluation + ranking

This skill is developed by AI Company CMO. A module component of ai-company-skill-learner.