360 Secure SkillHub
360 安全技能中心

skilly-cli

用于通过 skilly CLI 管理仓库中的 agent skills:按名称添加或移除 bundle/单个 skill、从 hub 拉取更新,并在遇到外部 skills.sh 条目时用 skills CLI 手工固定。命令会自行提交、推送并创建 PR;skilly 管理的文件不应手工编辑,技能变更应回到源仓库。

timschoch
热度 0.00
最近更新 2026-10-19 04:25:28
分类:开发依赖:代码执行 / 读写文件应用场景:工作流 / 自动化脚本 / DevOps

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add timschoch/skilly/skilly-cli
Metadata
name
skilly-cli
description
Manage this repo's agent skills with the skilly CLI — add or remove bundles/skills, pull hub updates. Use when the user wants skills or bundles added, removed, or updated. For a skills.sh URL use the skills CLI directly, not skilly. Not for repo bootstrap (that is `skilly setup`, run once).

Skilly CLI

This repo's skills are managed by skilly, a hub at timschoch/skilly. Always use the CLI; never install skills by manual copies.

Exception — the user posts a skills.sh URL: that skill lives outside the hub. Hand-pin it with the skills CLI: npx -y skills add <url> --agent claude-code -y. It lands in skills-lock.json and survives the sync; skilly never touches hand-pins.

  • Add a bundle or single skill: npx -y github:timschoch/skilly add <name...> — bundle names and what they contain: catalog
  • Remove: npx -y github:timschoch/skilly remove <name...> — removing a bundle keeps skills still claimed by another bundle
  • Pull the hub's current state: npx -y github:timschoch/skilly update

Every verb ends with its own commit, push, and PR — do not commit or push for it. On main it branches to chore/skilly-setup by itself. On any other branch it stops before the commit when .claude/hooks/check-branch-name.mjs refuses the name: rename with git branch -m <type>/<description>, then run the verb again.

Never hand-edit skilly-owned files — the nightly sync wipes and rewrites them:

  • .claude/skills/ and .agents/skills/ (installed skills)
  • .claude/rules/<name>-*.md (installed router rules)
  • .skilly/config.json, skills-lock.json

A change to a skill belongs in its source repo (see skills-lock.json for the source), a repo-local rule in CLAUDE.md. A bug in an installed skill, hook, or rule: file it before you work around it, see .claude/rules/workflow-hazards.md.