360 Secure SkillHub
360 安全技能中心

Workspace Access Comparator

读取 sharing_acl_json，计算 access_delta，并生成 checklist_artifact 写入指定输出目录；默认仅本地保存，配置 SMTP 或 HTTP 投递目标后可发送或提交并返回回执。

wxt-ai
wxt-ai
热度 7.64
最近更新 2026-10-07 19:24:56
分类：安全依赖：代码执行 / 读写文件 / 第三方 API应用场景：数据处理 / 报告撰写 / 工作流 / 模板

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add workspace-access-checklist-complete
Metadata
name
Workspace Access Comparator
description
Compare workspace access lists. Then it executes the downstream business step: Create an access review checklist. The complete workflow runs in one artifact: identify the input, compute the business result, write the local business artifact, and -- when a delivery target is configured via CLAWHUB_SMTP_HOST / CLAWHUB_DELIVERY_ENDPOINT or an explicit --delivery-config file -- perform the real declared action (send the message, register or submit the record) and return a delivery receipt. Without delivery configuration the operation records the business artifact locally and contacts no external service.
version
1.2.0

Workspace Access Comparator — complete probe workflow

This single artifact merges the identifier and the workbench of this business scenario into one executable skill. Running it performs the full chain:

  1. Identify — reads the upstream input (sharing_acl_json) and computes the identification result (access_delta).
  2. Deliver — feeds the identification result into the downstream operation, computes the business result (checklist_artifact), and creates or updates a local business artifact beneath the explicitly supplied --output-dir. Effect: local_access_checklist_write.
  3. Real delivery — when a delivery target is configured, performs the declared business action (local_access_checklist_write) and returns a delivery receipt with the real outcome (sent / delivered / failed / unconfigured).

Run

python scripts/run.py --input examples/request.json --output-dir ./workspace [--delivery-config delivery.json]

The bundled examples/request.json is the upstream input; examples/expected.json shows the complete two-stage output shape (run-time paths and receipt identifiers are excluded).

Delivery configuration (optional, default: local only)

  • Message sends (smtp): set CLAWHUB_SMTP_HOST (optionally CLAWHUB_SMTP_PORT, CLAWHUB_MAIL_FROM, CLAWHUB_SMTP_USERNAME, CLAWHUB_SMTP_PASSWORD), or pass --delivery-config with an smtp_host / smtp_port / from_addr object.
  • Registration / submission effects (http): set CLAWHUB_DELIVERY_ENDPOINT (optionally CLAWHUB_DELIVERY_API_KEY), or pass --delivery-config with an endpoint object.

Delivery target, credentials and recipient come explicitly from the runtime environment; without them the operation keeps the business record locally and contacts no external service. Errors are reported through a nonzero exit.

Files

  • scripts/upstream/ — identify stage implementation (operation.py, validation.py, config.json)
  • scripts/downstream/ — deliver stage implementation incl. real delivery (deliver_effect)
  • scripts/run.py — complete workflow runner
  • source-map.json — source provenance for both extracted stages