360 Secure SkillHub
360 安全技能中心

Perfly

核心功能:基于用户授权的本地编码元数据(分支、提交标题等)生成简洁工作日志项,经用户确认后提交至Perfly。典型场景:用户要求发送当日工作、汇总编码工作或更新Perfly日志。输入为用户指令及授权的元数据,输出为日志预览及提交结果。需遵守隐私规则,不提交源码等敏感数据;依赖Perfly MCP服务配置,支持OAuth认证,无浏览器环境可使用备用令牌。

levi840714
levi840714
热度 19.74
最近更新 2026-07-02 17:05:09
分类:协作依赖:MCP 服务 / 内部调用大模型应用场景:摘要总结 / 任务管理 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add perfly-skill
Metadata
name
perfly-agent-sync
description
Summarize local coding work and submit selected worklog items to Perfly through the hosted Agent Sync MCP endpoint.

Perfly Agent Sync

Use this skill when the user asks you to send today's work to Perfly, summarize local coding work for Perfly, or update a Perfly worklog.

Requirements

Perfly Agent Sync requires the Perfly MCP server to be configured in the user's MCP client.

Production MCP endpoint:

https://api.perfly.dev/mcp

Prefer MCP OAuth discovery when the client supports browser authorization. The user should only need to add the hosted MCP endpoint.

Use a write-only bearer ingestion token only as a fallback for environments that cannot complete browser OAuth, such as headless CLI, SSH, devcontainer, CI, or remote sandbox workflows.

If token fallback is required, the MCP client sends:

Authorization: Bearer $PERFLY_INGESTION_TOKEN

Workflow

  1. Inspect only local context the user approved or clearly expects you to inspect.
  2. Prefer metadata such as branch names, recent commit titles, issue keys, task ids, and user-provided notes.
  3. Do not read or upload full diffs, source files, issue bodies, pull request bodies, logs, documents, secrets, or customer data.
  4. Draft concise worklog items with one clear title per accomplishment.
  5. Add a short note only when it improves later recall.
  6. Use metadata-only evidence refs such as git_commit:abc123, branch:feature/foo, or issue:ABC-123.
  7. Call perfly_preview_work_items.
  8. Show the preview to the user and ask for confirmation before writing, unless the user explicitly enabled unattended submission.
  9. After confirmation, call perfly_add_work_items.

Payload Rules

  • date must be the user's local work date in YYYY-MM-DD.
  • timezone must be an IANA timezone, such as Asia/Taipei.
  • source should identify the agent, such as agent:codex, agent:claude-code, agent:cursor, or agent:local-cli.
  • items must contain 1 to 50 concise summaries.
  • Use stable idempotencyKey values when possible, such as git:<sha>, issue:<key>, or branch:<name>:<date>:<slug>.

Privacy Rules

Never submit:

  • source code
  • diffs
  • full terminal logs
  • secrets, tokens, passwords, or API keys
  • customer data
  • document bodies
  • issue or pull request bodies
  • attachments

If the user asks to include sensitive material, summarize at a higher level and explain that Perfly Agent Sync accepts summary metadata only.

If MCP is unavailable, explain how to set up Perfly Agent Sync with the hosted MCP endpoint first. Do not ask the user to paste an ingestion token directly into chat; if OAuth cannot work in the user's environment, direct them to create a fallback token in the Perfly app setup page.