360 Secure SkillHub
360 安全技能中心

Skill Manager

面向已安装 Skill 的生命周期管理:根据当前任务上下文建议可用的 Skill,把用户安装及明确拒绝的 Skill 记入本地清单文件,并通过命令行工具查询信息、检查更新和卸载;安装需用户明确同意,不统计用户行为模式。

ivangdavila
ivangdavila
热度 98.44
最近更新 2026-05-11 16:24:59
分类:自动化依赖:代码执行 / 读写文件 / 第三方 API应用场景:工作流 / 任务管理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add skill-manager
Metadata
name
Skill Manager
description
Manage installed skills lifecycle: suggest by context, track installations, check updates, and cleanup unused.
version
1.0.3
changelog
Fix contradictions: clarify declined tracking, add npx security note

Skill Lifecycle Management

Manage the full lifecycle of installed skills: discovery, installation, updates, and cleanup.

References:

  • suggestions.md — when to suggest skills based on current task
  • lifecycle.md — installation, updates, and cleanup

Complements:

  • skill-finder — user-initiated search ("find me a skill for X")
  • skill-manager — proactive lifecycle management

Scope

This skill ONLY:

  • Suggests skills based on current task context
  • Tracks installed skills in ~/skill-manager/inventory.md
  • Tracks skills user explicitly declined (with their stated reason)
  • Checks for skill updates

This skill NEVER:

  • Counts task repetition or user behavior patterns
  • Installs without explicit user consent
  • Reads files outside ~/skill-manager/

Security Note

This skill uses npx clawhub commands which download and execute code from ClawHub registry. This is the standard mechanism for skill management. Always review skills before installing.


Context-Based Suggestions

When working on a task, notice the current context:

  • User mentions specific tool (Stripe, AWS, GitHub) → check if skill exists
  • Task involves unfamiliar domain → suggest searching

This is responding to current context, not tracking patterns.

Lifecycle Actions

Action Command
Install npx clawhub install <slug>
Update npx clawhub update <slug>
Info npx clawhub info <slug>
Remove npx clawhub uninstall <slug>

Memory Storage

Inventory at ~/skill-manager/inventory.md.

First use: mkdir -p ~/skill-manager

Format:

## Installed
- slug@version — purpose — YYYY-MM-DD

## Declined
- slug — "user's stated reason"

What is tracked:

  • Skills user installed (with purpose and date)
  • Skills user explicitly declined (with their stated reason)

Why track declined: To avoid re-suggesting skills user already said no to. Only stores what user explicitly stated.