cyxj-blog-pub — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cyxj-blog-pub (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
把一篇成稿文章发到博客站点。只做博客这一个平台,不要顺手发别处。
CYXJ_BLOG_REPO;未设置则回退 ~/项目/服务器/server-config/blog/,并向用户确认。$CYXJ_BLOG_REPO 都指这个路径。$CYXJ_VAULT_BASE/待发布/ 的成稿(未设置 CYXJ_VAULT_BASE 时按 ~/obsidian/灵感库 兜底,并向用户确认),或刚由 cyxj-transcript 产出的草稿前置:文章已成文。还是逐字稿先走 /cyxj-transcript。
| 项 | 值 |
|---|---|
| 博客项目 | $CYXJ_BLOG_REPO(见「前置检查」) |
| 文章目录 | src/content/posts/(文件名 kebab-case) |
| 图片 | 全部用图床公网 URL,禁止本地路径进正文 |
| 部署 | 进入 $CYXJ_BLOG_REPO 后先定位 package.json 所在目录再跑 pnpm build;build 后确认 dist/ 实际位置再拷贝 → bash deploy.sh blog |
---
title: <文章标题> # 必填
description: <一句话摘要> # 必填
pubDate: <YYYY-MM-DD> # 必填
tags: [<可选>] # 可选
image: <封面图床 URL> # 可选
draft: false # 可选;true 则不发布
---发布前校验三个必填项齐全:title/pubDate 可据稿推断后向用户确认;description 缺失必须问用户。
$CYXJ_VAULT_BASE/待发布/ 搜或问用户)。claude-code-for-non-coders.md。img.xiaochens.com,Lsky Pro,见内容创作 CLAUDE.md「图床操作参考」),拿到公网 URL 再写进正文。$CYXJ_BLOG_REPO/src/content/posts/<kebab>.md 是否已存在,存在则停下确认是否覆盖;再组装 frontmatter + 正文写入。$CYXJ_BLOG_REPO 后先定位 package.json 所在目录,在那里跑 pnpm build。ls 确认 dist/ 的实际位置,再执行拷贝(如 cp -r dist/* landing/);拷贝目标不确定时停下问用户。bash deploy.sh blog。pnpm build 之后、推上线之前,先跟用户确认一次。~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.