mirror-optimizer — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mirror-optimizer (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
bensz-collect-bugs 规范记录到 ~/.bensz-skills/bugs/，不要直接修改用户本地已安装的 skill 源码；若有 workaround，先记 bug，再继续完成任务。gh 上传新增 bug 到 huangwb8/bensz-bugs；不要 pull / clone 整个仓库。NO DEPLOYMENT WITHOUT MIRROR CONFIGURATION FIRST任何涉及依赖下载的部署任务，必须先确认并优化镜像源配置，否则在国内环境下部署将极慢或失败。
智能适配，透明可逆。根据项目技术栈自动识别需要配置的镜像源类型，生成标准化的配置文件，同时保持官方源兼容性，支持一键切换。
Dockerfile、docker-compose.yml 或 .dockerignorerequirements.txt、pyproject.toml、Pipfile、setup.py、setup.cfg 或 poetry.lockpackage.json、yarn.lock、pnpm-lock.yaml 或 package-lock.jsongo.mod、go.sum、Gopkg.lock 或 Gopkg.tomlpom.xml、build.gradle、build.gradle.kts 或 settings.gradleGemfile、gems.rb 或 Cargo.toml| 类型 | 检测文件 | 配置输出 | 国内镜像源 |
|---|---|---|---|
| Docker | Dockerfile, docker-compose.yml, .dockerignore | Dockerfile.mirror | 阿里云、腾讯云 |
| Python/pip | requirements.txt, pyproject.toml | pip.conf | 清华、阿里云、中科大 |
| Node.js/npm | package.json, package-lock.json | .npmrc | 淘宝、腾讯云 |
| Node.js/yarn | yarn.lock | .yarnrc.yml | 淘宝、腾讯云 |
| Go Modules | go.mod, go.sum | go.env | 阿里云、腾讯云 |
| Java/Maven | pom.xml | settings.xml | 阿里云、腾讯云 |
| Java/Gradle | build.gradle*, settings.gradle* | init.gradle | 阿里云、腾讯云 |
| Ruby/Bundler | Gemfile, gems.rb | config | 淘宝、腾讯云 |
| Rust/Cargo | Cargo.toml | config.toml | 清华、中科大 |
Dockerfile.mirror 优化版本（如适用）.bensz-api/skills/mirror-optimizer/output/ 目录存放所有配置文件MIRROR_OPTIMIZATION_REPORT.md 报告输出目录以config.yaml:mirror_optimization.output_dir为准，以下以默认.bensz-api/skills/mirror-optimizer/output/为例。
.bensz-api/skills/mirror-optimizer/output/
├── docker/
│ ├── Dockerfile.mirror # 优化的 Dockerfile
├── python/
│ └── pip.conf # pip 配置
├── nodejs/
│ ├── .npmrc # npm 配置
│ └── .yarnrc.yml # yarn 配置
├── golang/
│ └── go.env # Go Modules 配置
├── java/
│ ├── maven/
│ │ └── settings.xml # Maven 配置
│ └── gradle/
│ └── init.gradle # Gradle 配置
└── MIRROR_OPTIMIZATION_REPORT.md| 类型 | 推荐源 | URL |
|---|---|---|
| Docker | 阿里云 | https://registry.cn-hangzhou.aliyuncs.com |
| Docker | 腾讯云 | https://mirror.ccs.tencentyun.com |
| Python | 清华 | https://pypi.tuna.tsinghua.edu.cn/simple |
| Python | 阿里云 | https://mirrors.aliyun.com/pypi/simple/ |
| Node.js | 淘宝 | https://registry.npmmirror.com |
| Go | 阿里云 | https://mirrors.aliyun.com/goproxy/ |
| Go | 腾讯云 | https://mirrors.tencent.com/go/ |
| Java/Maven | 阿里云 | https://maven.aliyun.com/repository/public |
| Ruby | 淘宝 | https://gems.ruby-china.com |
| Rust | 清华 | https://mirrors.tuna.tsinghua.edu.cn/git/crates.io-index.git |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.