@yottameta/yotta-skills 0.7.2 → 0.19.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +108 -1
- package/README.md +29 -9
- package/README.zh-CN.md +33 -12
- package/SKILL.md +86 -12
- package/bin/yotta-skills.js +681 -90
- package/lib/hook-adapter.js +385 -0
- package/lib/install-evidence.js +18 -0
- package/lib/install-health.js +151 -0
- package/lib/install-lifecycle.js +149 -0
- package/lib/install-pipeline.js +387 -0
- package/lib/install-snapshot.js +245 -0
- package/lib/manifest.js +136 -0
- package/lib/update-check.js +99 -0
- package/lib/verify-gate.js +81 -0
- package/package.json +2 -1
- package/references/faq.md +26 -3
- package/references/install-flow.md +95 -7
- package/references/skill-list.md +10 -10
- package/references/tutorial.md +40 -6
- package/references/walkthroughs.md +11 -3
- package/scripts/yotta-skills-mcp.py +1 -1
- package/skill-manifest.json +34 -0
- package/skills.json +10 -10
|
@@ -30,15 +30,23 @@ npx -y @yottameta/yotta-skills --agent codex
|
|
|
30
30
|
npx -y @yottameta/yotta-skills update --check --agent codex
|
|
31
31
|
```
|
|
32
32
|
|
|
33
|
-
2.
|
|
33
|
+
2. 如果由后台调度执行，改用周检入口：
|
|
34
34
|
|
|
35
|
-
|
|
35
|
+
```bash
|
|
36
|
+
npx -y @yottameta/yotta-skills update --check --scheduled --agent codex
|
|
37
|
+
```
|
|
38
|
+
|
|
39
|
+
未到期时不联网；到期只检查一次并把结果写入 `~/.yottaskills/update-check.json`。
|
|
40
|
+
|
|
41
|
+
3. 根据输出确认可更新清单。
|
|
42
|
+
|
|
43
|
+
4. 执行增量更新：
|
|
36
44
|
|
|
37
45
|
```bash
|
|
38
46
|
npx -y @yottameta/yotta-skills update --agent codex
|
|
39
47
|
```
|
|
40
48
|
|
|
41
|
-
|
|
49
|
+
5. 复核：已最新的技能应显示跳过，落后的技能显示更新；失败项单独重装。
|
|
42
50
|
|
|
43
51
|
## 走查 3：按路由安装单个技能
|
|
44
52
|
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
{
|
|
2
|
+
"manifestVersion": 1,
|
|
3
|
+
"slug": "yotta-skills",
|
|
4
|
+
"name": "元阁",
|
|
5
|
+
"package": "@yottameta/yotta-skills",
|
|
6
|
+
"version": "0.19.0",
|
|
7
|
+
"trust": "yottameta",
|
|
8
|
+
"install": {
|
|
9
|
+
"idempotent": true
|
|
10
|
+
},
|
|
11
|
+
"permissions": {
|
|
12
|
+
"filesystem": "user-skills-dir",
|
|
13
|
+
"network": "registry",
|
|
14
|
+
"process": "child-process",
|
|
15
|
+
"note": "安装器按用户指定 registry 下载技能包；安装前执行元信门禁与 hook 评估。"
|
|
16
|
+
},
|
|
17
|
+
"auto_apply": {
|
|
18
|
+
"mode": "hook",
|
|
19
|
+
"note": "元阁自身作为安装 wrapper，声明落位前安装门禁。"
|
|
20
|
+
},
|
|
21
|
+
"hooks": [
|
|
22
|
+
{
|
|
23
|
+
"event": "before_install",
|
|
24
|
+
"require_tool": "install_gate",
|
|
25
|
+
"condition": "安装或升级动作进入落位前",
|
|
26
|
+
"on_fail": "block",
|
|
27
|
+
"fallback": "wrapper",
|
|
28
|
+
"evidence": [
|
|
29
|
+
"audit_log",
|
|
30
|
+
"exit_code"
|
|
31
|
+
]
|
|
32
|
+
}
|
|
33
|
+
]
|
|
34
|
+
}
|
package/skills.json
CHANGED
|
@@ -21,14 +21,14 @@
|
|
|
21
21
|
"slug": "yotta-workflow",
|
|
22
22
|
"name": "元序",
|
|
23
23
|
"pkg": "@yottameta/yotta-workflow",
|
|
24
|
-
"version": "0.4.
|
|
24
|
+
"version": "0.4.1",
|
|
25
25
|
"desc": "跨会话/跨项目通用工作流协议（状态就近存）"
|
|
26
26
|
},
|
|
27
27
|
{
|
|
28
28
|
"slug": "yotta-memory",
|
|
29
29
|
"name": "元忆",
|
|
30
30
|
"pkg": "@yottameta/yotta-memory",
|
|
31
|
-
"version": "0.
|
|
31
|
+
"version": "0.13.0",
|
|
32
32
|
"desc": "有权限边界的文件式智能体记忆（FACT/PREF/BOUND/COMMIT）"
|
|
33
33
|
},
|
|
34
34
|
{
|
|
@@ -42,7 +42,7 @@
|
|
|
42
42
|
"slug": "yotta-security-audit",
|
|
43
43
|
"name": "元安",
|
|
44
44
|
"pkg": "@yottameta/yotta-security-audit",
|
|
45
|
-
"version": "0.2.
|
|
45
|
+
"version": "0.2.3",
|
|
46
46
|
"desc": "安全扫描引擎：13 类检测器 + 系统安全基线"
|
|
47
47
|
},
|
|
48
48
|
{
|
|
@@ -56,14 +56,14 @@
|
|
|
56
56
|
"slug": "yotta-recon",
|
|
57
57
|
"name": "元析",
|
|
58
58
|
"pkg": "@yottameta/yotta-recon",
|
|
59
|
-
"version": "0.1.
|
|
59
|
+
"version": "0.1.6",
|
|
60
60
|
"desc": "跨智能体网络侦察：零依赖端口/服务/版本指纹探测"
|
|
61
61
|
},
|
|
62
62
|
{
|
|
63
63
|
"slug": "yotta-guardian",
|
|
64
64
|
"name": "元盾",
|
|
65
65
|
"pkg": "@yottameta/yotta-guardian",
|
|
66
|
-
"version": "0.1.
|
|
66
|
+
"version": "0.1.3",
|
|
67
67
|
"desc": "跨智能体危险调用拦截护栏：确定性规则 + 可插拔意图验证"
|
|
68
68
|
},
|
|
69
69
|
{
|
|
@@ -98,21 +98,21 @@
|
|
|
98
98
|
"slug": "yotta-skill-creator",
|
|
99
99
|
"name": "元造",
|
|
100
100
|
"pkg": "@yottameta/yotta-skill-creator",
|
|
101
|
-
"version": "0.1.
|
|
101
|
+
"version": "0.1.1",
|
|
102
102
|
"desc": "工坊「造」：端到端造技能脚手架"
|
|
103
103
|
},
|
|
104
104
|
{
|
|
105
105
|
"slug": "yotta-publish-guard",
|
|
106
106
|
"name": "元守",
|
|
107
107
|
"pkg": "@yottameta/yotta-publish-guard",
|
|
108
|
-
"version": "0.
|
|
108
|
+
"version": "0.4.1",
|
|
109
109
|
"desc": "工坊「守」：发布前守门（版本四件对齐 + 三通道查重）"
|
|
110
110
|
},
|
|
111
111
|
{
|
|
112
112
|
"slug": "yotta-logwatch",
|
|
113
113
|
"name": "元察",
|
|
114
114
|
"pkg": "@yottameta/yotta-logwatch",
|
|
115
|
-
"version": "0.2.
|
|
115
|
+
"version": "0.2.8",
|
|
116
116
|
"desc": "安全日志分析检测引擎（攻击链识别/告警聚合）"
|
|
117
117
|
},
|
|
118
118
|
{
|
|
@@ -140,7 +140,7 @@
|
|
|
140
140
|
"slug": "yotta-triage",
|
|
141
141
|
"name": "元鉴",
|
|
142
142
|
"pkg": "@yottameta/yotta-triage",
|
|
143
|
-
"version": "0.1.
|
|
143
|
+
"version": "0.1.2",
|
|
144
144
|
"desc": "恶意样本静态初筛引擎（哈希/熵/字符串/PE-ELF）"
|
|
145
145
|
},
|
|
146
146
|
{
|
|
@@ -154,7 +154,7 @@
|
|
|
154
154
|
"slug": "yotta-verify",
|
|
155
155
|
"name": "元信",
|
|
156
156
|
"pkg": "@yottameta/yotta-verify",
|
|
157
|
-
"version": "0.
|
|
157
|
+
"version": "0.3.0",
|
|
158
158
|
"desc": "装前安全扫描器 + audited 徽章（prompt injection + 危险模式）"
|
|
159
159
|
}
|
|
160
160
|
]
|