← 返回
未分类

Skill Port

Skill Port audits and ports AI agent skills across Claude Code, Codex, Gemini CLI, and Agent Skills-compatible runtimes. It checks portability, target-agent compatibility, risky scripts/hooks/MCP configs, and stages safe target layouts without installing or running source code.
Skill Port 对跨 Claude Code、Codex、Gemini CLI 及 Agent Skills 兼容运行时的 AI agent 技能进行审计和移植。检查可移植性、目标 agent 兼容性、风险脚本/钩子/MCP 配置,在不安装或运行源码的情况下构建安全目标布局。
yand
未分类 clawhub v0.1.0 1 版本 100000 Key: 无需
★ 0
Stars
📥 272
下载
💾 0
安装
1
版本
#agent-skills#claude#codex#gemini#latest#portability#security

概述

Skill Port

Use this skill to audit or port agent skills and plugin ecosystems. It supports Claude Code, Codex, Gemini CLI, and Agent Skills-compatible sources and targets through an adapter-based workflow.

Operating Modes

  • audit-only: inspect the source and produce a deterministic compatibility/security report. Do not create ported files.
  • port: inspect the source, stage target-agent files, and produce the same report.
  • case-study: analyze a large ecosystem and recommend what to port, split, ignore, or keep as dependency notes.

Default to audit-only when the user's request is unclear or security-sensitive. In audit-only mode, be decisive: recommend a concrete port scope, target layout, command mapping plan, and next port command without creating files.

Safety Rules

  • Do not install a source skill/plugin as part of auditing or porting.
  • Do not run source scripts, package managers, install lifecycle hooks, or plugin commands unless the user explicitly asks after reviewing the audit.
  • Do not write into global or project agent install directories unless the user explicitly asks.
  • Stage output under target-agent naming:
  • Single skill: skills///
  • Multi-skill/plugin source: ports///
  • Treat installation as a separate final step using the target agent's normal installer.
  • Preserve warnings, legal disclaimers, human-review requirements, and safety limits from the source.

Workflow

  1. Identify source and target
    • Determine source path or URL, source agent/ecosystem, target agent, and requested mode.
    • If the target agent is not specified, infer it from the active runtime. When running in Codex, use codex.
    • For remote URLs, clone/fetch only after user approval or explicit execution request; otherwise document the needed command.
    • For expensive scans, ask the user to run focused commands and share output.
  1. Run inventory
    • Prefer scripts/audit_skill.py for deterministic local inspection.
    • If the source is large, run it on the narrowest useful directory first.
    • Read source-specific references only as needed:
    • Portability model: references/portability-model.md
    • Claude sources: references/source-claude.md
    • Codex sources: references/source-codex.md
    • Gemini sources: references/source-gemini.md
    • Codex targets: references/target-codex.md
    • Claude targets: references/target-claude.md
    • Gemini targets: references/target-gemini.md
    • Large ecosystems: references/ecosystem-porting.md
    • Location policy: references/locations.md
    • Security review: references/security.md
  1. Classify artifacts
    • First classify by layer: project instructions, skills, commands, agents, plugins, MCP/tools, hooks, assets/scripts.
    • Portable: agent-neutral SKILL.md, references, examples, assets, templates.
    • Needs adaptation: slash commands, agent prompts, Claude wording, target-specific frontmatter.
    • Dependency-bound: MCP configs, external APIs, subscriptions, app connectors, credentials.
    • Unsupported: lifecycle hooks, automatic plugin installation, Cowork dispatch, managed-agent orchestration, policy engines, and target-specific extension behavior unless a target equivalent is available.
    • Mark each mapped item as direct, translated, partial, unsupported, or manual.
  1. Port only when requested
    • Create target-agent skill folders in the staging location.
    • Rewrite frontmatter for the target agent.
    • Convert slash-command intent into trigger text or workflow sections.
    • Create dependency and unsupported-feature notes for MCPs, provider credentials, app connectors, lifecycle hooks, and orchestration behavior.
    • Keep unsupported features in dependency notes or a compatibility report; do not pretend they work.
  1. Report
    • Follow references/report-schema.md.
    • Include target compatibility, recommended scope, proposed target layout, auto-port candidates, dependency-bound items, unsupported items, security findings, output paths, install commands, and remaining manual steps.

Useful Commands

python3 scripts/audit_skill.py <source-path> --target-agent codex
python3 scripts/audit_skill.py <source-path> --target-agent codex --format markdown
python3 scripts/audit_skill.py <source-path> --target-agent claude --format markdown
python3 scripts/audit_skill.py <source-path> --target-agent gemini --format markdown
python3 scripts/audit_skill.py <source-path> --target-agent codex --output report.json

Output Standard

For every audit or port, state:

  • Source inspected and target agent.
  • Whether files were created and where.
  • Compatibility summary.
  • Layer summary and conversion status summary.
  • Recommended scope and proposed target layout.
  • Automatic work that can be done in port mode.
  • Security findings that affect installation or trust.
  • Manual setup still required, limited to credentials, MCP servers, app connectors, provisioning, regulated human review, or target-agent installation.

版本历史

共 1 个版本

  • v0.1.0 当前
    2026-05-21 14:45 安全 安全

安全检测

腾讯云安全 (Keen)

安全,无风险
查看报告

腾讯云安全 (Sanbu)

安全,无风险
查看报告

🔗 相关推荐

security-compliance

Skill Vetter

spclaudehome
AI智能体技能安全预审工具。安装ClawdHub、GitHub等来源技能前,检查风险信号、权限范围及可疑模式。
★ 1,215 📥 266,574
ai-intelligence

Self-Improving + Proactive Agent

ivangdavila
自我反思+自我批评+自我学习+自组织记忆。智能体评估自身工作、发现错误并持续改进。
★ 1,358 📥 318,467
ai-intelligence

ontology

oswalpalash
类型化知识图谱,用于结构化智能体记忆与可组合技能。支持创建/查询实体(人员、项目、任务、事件、文档)及关联...
★ 712 📥 243,883