@alanwang-merit/meritdata-platform-skill-package 1.0.9 → 1.0.11

package/skills/meritdata-platform-2nd-dev-check/agents/openai.yaml

@@ -0,0 +1,33 @@
+display_name: "MeritData 二开体检"
+short_description: "二开项目就绪度体检，7 类 60+ 项门禁"
+default_prompt: |
+  meritdata-platform-2nd-dev-check 对二开项目做就绪度体检。
+
+  适用场景：
+  - 新项目接入 skill 套件前
+  - 存量项目升级/接入前
+  - 上线前的就绪度自检
+  - 季度安全审计
+
+  使用方式：
+  ```
+  meritdata-platform-2nd-dev-check --target <项目路径>
+  ```
+
+  7 类检查（60+ 项）：
+  1. 依赖与版本（10 项）🔴
+  2. 命名规范（8 项）🟠
+  3. 包结构（9 项）🟠
+  4. 数据边界（11 项）🔴
+  5. 集成与接口（8 项）🟠
+  6. 前端工程（7 项）🟠
+  7. 安全合规（9 项）🔴
+
+  输出：
+  - 通过/警告/失败分类汇总
+  - GAP 修复建议（具体到代码片段）
+  - 影响范围（仅本项目/跨服务）
+
+  强制约束：
+  - fail 项不修复则不允许进入上线流程
+  - 不在 fix 建议中要求用户提供平台源码

package/skills/meritdata-platform-2nd-dev-check/checklists/checks.schema.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "MeritData 2nd-dev-check 检查项",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "description": "检查项唯一 ID，如 DB-001" },
+    "category": {
+      "type": "string",
+      "enum": ["dependency", "naming", "package-structure", "data-boundary", "integration", "frontend", "security"]
+    },
+    "level": {
+      "type": "string",
+      "enum": ["block", "warn"],
+      "description": "block=阻塞, warn=警告"
+    },
+    "title": { "type": "string" },
+    "rule": { "type": "string", "description": "检测规则（命令或正则）" },
+    "expected": { "type": "string" },
+    "fix": { "type": "string", "description": "修复建议" }
+  },
+  "required": ["id", "category", "level", "title", "rule", "expected"]
+}

package/skills/meritdata-platform-2nd-dev-check/checklists/dependency.chk.json

@@ -0,0 +1,96 @@
+{
+  "category": "dependency",
+  "version": "1.0.0",
+  "checks": [
+    {
+      "id": "DEP-001",
+      "category": "dependency",
+      "level": "block",
+      "title": "Java 版本 ≥ 1.8",
+      "rule": "grep -E 'maven.compiler.source|maven.compiler.target|<java.version>' pom.xml",
+      "expected": "1.8 或更高",
+      "fix": "<properties><maven.compiler.source>1.8</maven.compiler.source></properties>"
+    },
+    {
+      "id": "DEP-002",
+      "category": "dependency",
+      "level": "block",
+      "title": "Spring Boot 版本在支持矩阵内",
+      "rule": "grep -E '<spring.boot.version>' pom.xml",
+      "expected": "2.3.x 或 2.4.x 或 2.5.x",
+      "fix": "升级到平台兼容版本"
+    },
+    {
+      "id": "DEP-003",
+      "category": "dependency",
+      "level": "block",
+      "title": "meritdata-cloud-starter 存在",
+      "rule": "grep -E 'meritdata-cloud-starter' pom.xml",
+      "expected": "至少一个匹配",
+      "fix": "添加 meritdata-cloud-starter 依赖"
+    },
+    {
+      "id": "DEP-004",
+      "category": "dependency",
+      "level": "warn",
+      "title": "Spring Cloud Alibaba 版本",
+      "rule": "grep -E 'spring-cloud-alibaba-dependencies' pom.xml",
+      "expected": "推荐 2021.x",
+      "fix": "升级 Spring Cloud Alibaba"
+    },
+    {
+      "id": "DEP-005",
+      "category": "dependency",
+      "level": "warn",
+      "title": "数据库连接池",
+      "rule": "grep -E 'druid|hikari' pom.xml",
+      "expected": "推荐 Druid",
+      "fix": "添加 Druid 依赖"
+    },
+    {
+      "id": "DEP-006",
+      "category": "dependency",
+      "level": "warn",
+      "title": "Redis 客户端",
+      "rule": "grep -E 'jedis|lettuce' pom.xml",
+      "expected": "推荐 Lettuce",
+      "fix": "使用 Lettuce"
+    },
+    {
+      "id": "DEP-007",
+      "category": "dependency",
+      "level": "warn",
+      "title": "MyBatis-Plus",
+      "rule": "grep -E 'mybatis-plus' pom.xml",
+      "expected": "推荐 3.4.x",
+      "fix": "升级 MyBatis-Plus"
+    },
+    {
+      "id": "DEP-008",
+      "category": "dependency",
+      "level": "warn",
+      "title": "Lombok",
+      "rule": "grep -E 'lombok' pom.xml",
+      "expected": "推荐 1.18.x",
+      "fix": "添加 Lombok"
+    },
+    {
+      "id": "DEP-009",
+      "category": "dependency",
+      "level": "block",
+      "title": "无 SNAPSHOT 依赖",
+      "rule": "grep -E '<version>.*-SNAPSHOT' pom.xml",
+      "expected": "生产环境无 SNAPSHOT",
+      "fix": "将 SNAPSHOT 改为正式版"
+    },
+    {
+      "id": "DEP-010",
+      "category": "dependency",
+      "level": "warn",
+      "title": "无废弃依赖",
+      "rule": "grep -E 'javax.ws.rs|commons-logging' pom.xml",
+      "expected": "无 javax.ws.rs（用 jakarta.ws.rs）",
+      "fix": "升级 javax.* 到 jakarta.*"
+    }
+  ]
+}

package/skills/meritdata-platform-2nd-dev-check/checklists/frontend.chk.json

@@ -0,0 +1,69 @@
+{
+  "category": "frontend",
+  "version": "1.0.0",
+  "checks": [
+    {
+      "id": "FE-001",
+      "category": "frontend",
+      "level": "warn",
+      "title": "Vue 2 项目",
+      "rule": "grep -E '\"vue\":' package.json",
+      "expected": "Vue 2.6.x",
+      "fix": "使用 Vue 2.6.x 而非 Vue 3"
+    },
+    {
+      "id": "FE-002",
+      "category": "frontend",
+      "level": "warn",
+      "title": "Vue CLI 而非 Vite",
+      "rule": "grep -E '\"vite\":' package.json",
+      "expected": "无 vite（使用 vue-cli-service）",
+      "fix": "使用 vue-cli 而非 vite"
+    },
+    {
+      "id": "FE-003",
+      "category": "frontend",
+      "level": "warn",
+      "title": "Element UI",
+      "rule": "grep -E '\"element-ui\":' package.json",
+      "expected": "Element UI 2.15.x",
+      "fix": "添加 element-ui 依赖"
+    },
+    {
+      "id": "FE-004",
+      "category": "frontend",
+      "level": "warn",
+      "title": "cloud-module-base",
+      "rule": "grep -E '\"cloud-module-base\":' package.json",
+      "expected": "包含 cloud-module-base",
+      "fix": "添加 cloud-module-base 依赖"
+    },
+    {
+      "id": "FE-005",
+      "category": "frontend",
+      "level": "warn",
+      "title": "vue.config.js 存在",
+      "rule": "[ -f 'vue.config.js' ] && echo OK",
+      "expected": "vue.config.js 存在",
+      "fix": "创建 vue.config.js"
+    },
+    {
+      "id": "FE-006",
+      "category": "frontend",
+      "level": "warn",
+      "title": "页面入口 src/pages",
+      "rule": "[ -d 'src/pages' ] && echo OK",
+      "expected": "src/pages 目录存在",
+      "fix": "创建 src/pages 目录结构"
+    },
+    {
+      "id": "FE-007",
+      "category": "frontend",
+      "level": "warn",
+      "title": "BaseApi 网关代理",
+      "rule": "grep -rn 'BaseApi' src/",
+      "expected": "使用 BaseApi 封装请求",
+      "fix": "使用 BaseApi 而非 axios 直接调用"
+    }
+  ]
+}

package/skills/meritdata-platform-2nd-dev-check/checklists/integration.chk.json

@@ -0,0 +1,78 @@
+{
+  "category": "integration",
+  "version": "1.0.0",
+  "checks": [
+    {
+      "id": "INT-001",
+      "category": "integration",
+      "level": "warn",
+      "title": "Feign Client 命名",
+      "rule": "find src/main/java -name '*Client.java' -o -name '*Feign.java'",
+      "expected": "以 Client 或 Feign 结尾",
+      "fix": "重命名为 *Client.java"
+    },
+    {
+      "id": "INT-002",
+      "category": "integration",
+      "level": "warn",
+      "title": "@FeignClient 注解存在",
+      "rule": "find src/main/java -name '*Client.java' | xargs grep -L '@FeignClient'",
+      "expected": "所有 Client 类都有 @FeignClient",
+      "fix": "添加 @FeignClient 注解"
+    },
+    {
+      "id": "INT-003",
+      "category": "integration",
+      "level": "warn",
+      "title": "Fallback 存在",
+      "rule": "find src/main/java -name '*Client.java' | xargs grep -L 'fallback'",
+      "expected": "所有 Client 都有 fallback",
+      "fix": "添加 fallback 类"
+    },
+    {
+      "id": "INT-004",
+      "category": "integration",
+      "level": "warn",
+      "title": "ResultBody 包装",
+      "rule": "find src/main/java -name '*Client.java' | xargs grep -L 'ResultBody'",
+      "expected": "返回类型使用 ResultBody 包装",
+      "fix": "返回类型改为 ResultBody<T>"
+    },
+    {
+      "id": "INT-005",
+      "category": "integration",
+      "level": "warn",
+      "title": "WebApi 路径",
+      "rule": "grep -rn '@RequestMapping' src/main/java | grep -v '/api/'",
+      "expected": "所有 Controller 路径含 /api/",
+      "fix": "添加 /api/ 前缀"
+    },
+    {
+      "id": "INT-006",
+      "category": "integration",
+      "level": "warn",
+      "title": "Header 透传",
+      "rule": "grep -rn 'RequestInterceptor' src/main/java | grep -L 'token|session'",
+      "expected": "包含 token/session 透传",
+      "fix": "添加 token/session 透传拦截器"
+    },
+    {
+      "id": "INT-007",
+      "category": "integration",
+      "level": "warn",
+      "title": "超时配置",
+      "rule": "find src/main/java -name '*Client.java' | xargs grep -L 'connectTimeout|readTimeout'",
+      "expected": "配置 connectTimeout / readTimeout",
+      "fix": "添加超时配置"
+    },
+    {
+      "id": "INT-008",
+      "category": "integration",
+      "level": "warn",
+      "title": "应用密钥",
+      "rule": "grep -rn 'app-key\\|app-secret\\|appKey\\|appSecret' src/main/resources/",
+      "expected": "无明文 app-key / app-secret",
+      "fix": "通过环境变量或配置中心注入"
+    }
+  ]
+}

package/skills/meritdata-platform-2nd-dev-check/checklists/naming.chk.json

@@ -0,0 +1,78 @@
+{
+  "category": "naming",
+  "version": "1.0.0",
+  "checks": [
+    {
+      "id": "NAME-001",
+      "category": "naming",
+      "level": "warn",
+      "title": "Controller 命名符合规范",
+      "rule": "find src/main/java -name '*Controller.java' | grep -vE 'Controller$|Resource$|Endpoint$'",
+      "expected": "以 Controller / Resource / Endpoint 结尾",
+      "fix": "重命名为 *Controller.java"
+    },
+    {
+      "id": "NAME-002",
+      "category": "naming",
+      "level": "warn",
+      "title": "Service 实现命名",
+      "rule": "find src/main/java -name '*ServiceImpl.java'",
+      "expected": "以 ServiceImpl 结尾",
+      "fix": "重命名为 *ServiceImpl.java"
+    },
+    {
+      "id": "NAME-003",
+      "category": "naming",
+      "level": "warn",
+      "title": "Service 接口前缀 I",
+      "rule": "find src/main/java -name 'IXxxService.java' -o -name 'I*Service.java'",
+      "expected": "接口以 I 开头",
+      "fix": "接口命名为 I + Service 名"
+    },
+    {
+      "id": "NAME-004",
+      "category": "naming",
+      "level": "warn",
+      "title": "Entity 后缀",
+      "rule": "find src/main/java -name '*Entity.java' -o -name '*Model.java'",
+      "expected": "Entity 或 Model 后缀",
+      "fix": "统一为 Entity 或 Model 后缀"
+    },
+    {
+      "id": "NAME-005",
+      "category": "naming",
+      "level": "warn",
+      "title": "Param 后缀",
+      "rule": "find src/main/java -name '*Param.java' -o -name '*Request.java'",
+      "expected": "Param 或 Request 后缀",
+      "fix": "参数类以 Param 或 Request 结尾"
+    },
+    {
+      "id": "NAME-006",
+      "category": "naming",
+      "level": "warn",
+      "title": "异常后缀",
+      "rule": "find src/main/java -name '*Exception.java' -o -name '*ErrorCode.java'",
+      "expected": "Exception 或 ErrorCode 后缀",
+      "fix": "异常类以 Exception 或 ErrorCode 结尾"
+    },
+    {
+      "id": "NAME-007",
+      "category": "naming",
+      "level": "warn",
+      "title": "工具类后缀",
+      "rule": "find src/main/java -name '*Utils.java' -o -name '*Helper.java'",
+      "expected": "Utils 或 Helper 后缀",
+      "fix": "工具类以 Utils 或 Helper 结尾"
+    },
+    {
+      "id": "NAME-008",
+      "category": "naming",
+      "level": "warn",
+      "title": "包名全小写",
+      "rule": "find src/main/java -type d | grep -E '[A-Z]'",
+      "expected": "包名全小写",
+      "fix": "包名改为全小写"
+    }
+  ]
+}

package/skills/meritdata-platform-2nd-dev-check/checklists/package-structure.chk.json

@@ -0,0 +1,87 @@
+{
+  "category": "package-structure",
+  "version": "1.0.0",
+  "checks": [
+    {
+      "id": "PKG-001",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "controller 包存在",
+      "rule": "[ -d 'src/main/java/com/*/*/controller' ] && echo OK",
+      "expected": "controller 包存在",
+      "fix": "创建 controller 包"
+    },
+    {
+      "id": "PKG-002",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "service 包存在",
+      "rule": "[ -d 'src/main/java/com/*/*/service' ] && echo OK",
+      "expected": "service 包存在",
+      "fix": "创建 service 包"
+    },
+    {
+      "id": "PKG-003",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "service.impl 子包",
+      "rule": "[ -d 'src/main/java/com/*/*/service/impl' ] && echo OK",
+      "expected": "service/impl 子包存在",
+      "fix": "创建 service/impl 子包"
+    },
+    {
+      "id": "PKG-004",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "param 包",
+      "rule": "[ -d 'src/main/java/com/*/*/param' ] && echo OK",
+      "expected": "param 包存在",
+      "fix": "创建 param 包"
+    },
+    {
+      "id": "PKG-005",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "model 包",
+      "rule": "[ -d 'src/main/java/com/*/*/model' ] && echo OK",
+      "expected": "model 包存在",
+      "fix": "创建 model 包"
+    },
+    {
+      "id": "PKG-006",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "exception 包",
+      "rule": "[ -d 'src/main/java/com/*/*/exception' ] && echo OK",
+      "expected": "exception 包存在",
+      "fix": "创建 exception 包"
+    },
+    {
+      "id": "PKG-007",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "util 包",
+      "rule": "[ -d 'src/main/java/com/*/*/util' ] && echo OK",
+      "expected": "util 包存在",
+      "fix": "创建 util 包"
+    },
+    {
+      "id": "PKG-008",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "common 包",
+      "rule": "[ -d 'src/main/java/com/*/*/common' ] && echo OK",
+      "expected": "common 包存在",
+      "fix": "创建 common 包"
+    },
+    {
+      "id": "PKG-009",
+      "category": "package-structure",
+      "level": "warn",
+      "title": "resources/mapper",
+      "rule": "[ -d 'src/main/resources/mapper' ] && echo OK",
+      "expected": "mapper 目录存在",
+      "fix": "创建 src/main/resources/mapper"
+    }
+  ]
+}

package/skills/meritdata-platform-2nd-dev-check/checklists/security.chk.json

@@ -0,0 +1,87 @@
+{
+  "category": "security",
+  "version": "1.0.0",
+  "checks": [
+    {
+      "id": "SEC-001",
+      "category": "security",
+      "level": "block",
+      "title": "密码加密存储",
+      "rule": "grep -rnE 'password.*=.*[\"\\'].{1,32}[\"\\']' src/main/resources/application*.yml",
+      "expected": "无明文密码",
+      "fix": "使用 ${DB_PASSWORD} 环境变量"
+    },
+    {
+      "id": "SEC-002",
+      "category": "security",
+      "level": "block",
+      "title": "无硬编码密钥",
+      "rule": "grep -rnE 'app-key\\s*[:=]\\s*[\"\\'].+[\"\\']' src/main/",
+      "expected": "无硬编码 app-key",
+      "fix": "通过配置中心或环境变量"
+    },
+    {
+      "id": "SEC-003",
+      "category": "security",
+      "level": "block",
+      "title": "SQL 预编译",
+      "rule": "grep -rnE '\"\\s*\\+\\s*.*\\s*\\+\\s*\"' src/main/java/ | grep -i 'select\\|insert\\|update\\|delete'",
+      "expected": "无 SQL 拼接",
+      "fix": "使用 PreparedStatement 或 @Param"
+    },
+    {
+      "id": "SEC-004",
+      "category": "security",
+      "level": "warn",
+      "title": "日志脱敏",
+      "rule": "grep -rnE 'log\\.(info|debug|warn|error)\\(.*[Pp]assword' src/main/java/",
+      "expected": "日志不含密码",
+      "fix": "日志脱敏后再记录"
+    },
+    {
+      "id": "SEC-005",
+      "category": "security",
+      "level": "warn",
+      "title": "Token 不入 URL",
+      "rule": "grep -rnE '@(Get|Request)Mapping.*token\\s*=' src/main/java/",
+      "expected": "Token 通过 Header 而非 URL",
+      "fix": "Token 改用 Header 传递"
+    },
+    {
+      "id": "SEC-006",
+      "category": "security",
+      "level": "block",
+      "title": "HTTPS 配置",
+      "rule": "grep -E 'server\\.ssl' src/main/resources/application*.yml",
+      "expected": "生产环境启用 HTTPS",
+      "fix": "配置 server.ssl.*"
+    },
+    {
+      "id": "SEC-007",
+      "category": "security",
+      "level": "warn",
+      "title": "CORS 配置",
+      "rule": "grep -rn 'CorsConfiguration\\|allowedOrigins' src/main/java/",
+      "expected": "CORS 限制来源",
+      "fix": "添加 CorsConfiguration 配置"
+    },
+    {
+      "id": "SEC-008",
+      "category": "security",
+      "level": "warn",
+      "title": "X-Powered-By 关闭",
+      "rule": "grep -rn 'X-Powered-By' src/main/java/ | grep -v 'disable'",
+      "expected": "关闭 X-Powered-By Header",
+      "fix": "添加 server.tomcat.remote-ip-header 或 nginx 配置"
+    },
+    {
+      "id": "SEC-009",
+      "category": "security",
+      "level": "warn",
+      "title": "会话超时",
+      "rule": "grep -E 'server\\.session\\.timeout' src/main/resources/application*.yml",
+      "expected": "配置 session.timeout",
+      "fix": "添加 server.session.timeout=30m"
+    }
+  ]
+}