360 Secure SkillHub
360 安全技能中心

repo-agent-brief

在编码代理开始工作前,扫描本地仓库,提取高信号上下文文件,推断技术栈与常用命令,生成紧凑仓库地图,并标记明显的密钥或风险指令模式;支持按 diff 生成分支交接简报、JSON 输出和 bundle。它不是完整密钥扫描器,生成内容可能含仓库片段,公开前需复核。

builtbyecho
builtbyecho
热度 61.12
最近更新 2026-05-28 07:58:10
分类:开发依赖:代码执行 / 读写文件应用场景:代码审查 / 摘要总结 / 工作流 / DevOps ...

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add repo-agent-brief
Metadata
name
repo-agent-brief
description
Generate concise, safety-aware repository orientation briefs with @builtbyecho/repo-agent-brief/agent-brief before coding-agent work, reviews, handoffs, PR analysis, unfamiliar repo edits, diff-aware branch handoffs, or when an agent needs stack/commands/context/risk signals before changing files.

Repo Agent Brief Skill

Use @builtbyecho/repo-agent-brief to orient an agent before it edits or reviews a repository. It finds high-signal context files, infers stack/commands, builds a compact repo map, and flags obvious secret/risky-instruction patterns.

Default workflow

From the repository root:

npx @builtbyecho/repo-agent-brief . > AGENT_BRIEF.md
sed -n '1,220p' AGENT_BRIEF.md

For in-progress branches:

npx @builtbyecho/repo-agent-brief . --diff origin/main > AGENT_HANDOFF.md
sed -n '1,260p' AGENT_HANDOFF.md

For machine-readable automation:

npx @builtbyecho/repo-agent-brief . --format json > agent-brief.json

For durable handoffs:

npx @builtbyecho/repo-agent-brief . --diff HEAD --bundle
sed -n '1,220p' .agent-brief/brief.md
sed -n '1,160p' .agent-brief/verification.md

When to use

  • First pass in an unfamiliar repo.
  • Before delegating to a coding agent.
  • PR/branch handoff where changed files matter.
  • Safety preflight before touching CI, migrations, deploy scripts, auth, or config.

Safety

  • This is not a full secret scanner. Use Gitleaks/TruffleHog for full audits.
  • If high-risk patterns are found, inspect before proceeding.
  • Use --fail-on-high-risk in CI or strict agent workflows.
  • Generated briefs may include snippets from repo context files; avoid posting publicly without review.

Useful commands

npx @builtbyecho/repo-agent-brief .
npx @builtbyecho/repo-agent-brief . --diff HEAD
npx @builtbyecho/repo-agent-brief . --diff HEAD --bundle
npx @builtbyecho/repo-agent-brief . --diff origin/main --fail-on-high-risk
npx @builtbyecho/repo-agent-brief . --no-snippets