Laporan audit skill
contract-first Laporan audit.
分前端/后端（或多个服务）多端开发的项目，用 CONTRACT.md 指向的唯一机器契约，各端只照它各做各的，防止字段漂移导致集成时白屏。支持单会话多 agent 和多终端各自跑两种模式。只要项目有前后端/多服务、接口字段老对不上、各端联调卡住、某端改了字段忘了通知别人、或前端为渲染一个页面要调一堆接口拼数据，就用这个 skill，哪怕用户没明说"契约"。这套方法论的学名是消费者驱动契约（Consumer-Driven Contracts, CDC）/ 契约测试。中文触发：契约式开发、接口契约、前后端协作、多终端协作、防字段漂移、接口对不上、联调、API 契约、字段命名不一致、集成白屏、唯一真相源、契约测试、CDC。English triggers: contract-first development, consumer-driven contracts, contract testing, API contract, frontend backend collaboration, multi-terminal, prevent field drift, provider verification.
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adopsi GitHub
Info62
127 star GitHub
Aktivitas star/fork
Peringatan51
127 star dan 3 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Pemeliharaan terbaru
Lulus100
16 hari sejak push
Kejelasan lisensi
Lulus86
MIT
Kelengkapan README/SKILL.md
Lulus86
Metadata memuat konteks penggunaan dan alur kerja yang cukup
Risiko dependensi/runtime
Info64
command execution surface, network or browser surface
Ketersediaan pemasangan
Lulus92
npx skills add qshanx/docs-governance --skill contract-first
Keamanan perintah pemasangan
Lulus92
Jalur pemasangan paket atau runtime standar
Cakupan izin
Peringatan50
shell or command execution, network or browser access
Bukti repositori
Lulus86
https://github.com/qshanx/docs-governance/tree/main/skills/contract-first
Status peninjauan
Peringatan46
Persetujuan tinjauan AI belum ada
Hasil terbukti Agent
Info54
Belum ada data hasil Agent
Pemeriksaan
Tinjauan pemasangan dan adopsi
Jalur pemasangan
92
npx skills add qshanx/docs-governance --skill contract-first
Repositori
88
https://github.com/qshanx/docs-governance/tree/main/skills/contract-first
Lisensi
86
MIT
Pemeliharaan
100
16 hari sejak push
Tinjauan AI
55
Review approval is missing
Kelengkapan README/SKILL.md
86
Usable description available
Risiko dependensi
64
command execution surface, network or browser surface
Keamanan perintah pemasangan
92
Jalur pemasangan paket atau runtime standar
Cakupan izin
50
shell or command execution, network or browser access
Aktivitas star/fork
51
127 star dan 3 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Adopsi
68
127 star GitHub
Peringatan
- Permission surface may require sandboxing
- Persetujuan tinjauan AI belum ada
- Quality score needs review
- Permission surface needs review: shell or command execution, network or browser access
- Stars/forks activity: 127 stars, 3 forks; issue activity unavailable in current metadata
- Permission surface: shell or command execution, network or browser access
- Review status: AI review approval is missing
Metode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Bandingkan opsi sekitar