agent-skills-cce — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-skills-cce (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
来自 cc-enhance。-cce 后缀表示此技能由 cc-enhance 项目安装,避免与本地同名技能冲突。| 市场 | CLI 工具 | 实测 | |
|---|---|---|---|
| skills.sh | npx skills add owner/repo | ✅ 已测 | |
| lobehub.com/skills | @lobehub/market-cli | ✅ 已测 | |
| modelscope.cn/skills | npx skills add <url> | ✅ 已测 | |
| skillhub.cn | `curl install.sh \ | bash` | ⚠️ 脚本已审查,未执行 |
→ 各市场详细命令见 references/marketplaces.md → 推荐直接安装的 skill 仓库见 references/recommended.md
skills.sh——让 Claude 用搜索工具找:
用 Tavily 搜 "site:github.com <功能> skill SKILL.md Claude Code"LobeHub——CLI 搜索,返回 stars/installs:
npx -y @lobehub/market-cli skills search --q "<关键词>"ModelScope——网站上按分类浏览,或:
npx skills findSkillHub——网站浏览(skillhub.cn),或搜索工具搜「skillhub.cn <关键词>」。
# GitHub 仓库(skills.sh 索引的)
npx skills add stared/vibe-commit
# ModelScope URL
npx skills add https://modelscope.cn/skills/@Alipay/alipay-payment-integration
# LobeHub
npx -y @lobehub/market-cli skills install <identifier> --agent claude-code
# SkillHub
curl -fsSL https://skillhub.cn/install/install.sh | bash| 工具 | 安装路径 | 机制 |
|---|---|---|
npx skills add | .agents/skills/<name>/ | 实体文件在此,symlink 到各 agent 目录 |
@lobehub/market-cli | .claude/skills/<name>/ | 直接安装到 Claude Code 目录 |
Skill 安装后,Claude Code 会话启动时自动发现并加载。安装 = 启用,无需手动激活。
验证:
ls .agents/skills/ # npx skills 安装的
ls .claude/skills/ # LobeHub 安装的
npx skills list # 列出所有
head -5 .agents/skills/*/SKILL.md # 查看 skill 描述Skill 目录不是囤积处。每多一个 skill 就多一份上下文开销:
不常用但想保留的 skill —— 记录来源,删除实体:
# 备份当前清单
npx skills list > ~/.claude/skills-backup.txt
# 删除不用的
npx skills remove <name>备份记录应包含:skill 名称、安装来源(repo/URL/marketplace)、安装日期、用途。需要时精确找回,不需要时不占上下文。
「不记得」「能」「重叠」→ 删除。
| 依赖 | 用途 | 安装方式 | 磁盘 | 必需 |
|---|---|---|---|---|
| npx / Node.js | skill 包管理器,安装/搜索/删除 | 安装 Node.js(含 npx) | ~100MB | 是 |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.