“package”的搜索结果

Runs twice in a PFD to P&ID job. Part 1, before gate G3, validates the discipline proposals for provenance, UNKNOWN handling, conflicts, prohibited content and cross-section consistency and returns results and blocking items. Part 2, before gate G5, assembles the review package, with job header, gate record, every register and proposal, consolidated UNKNOWN list, feedback log and closing statement. Use when the user asks to "validate the enrichment", "run validation before G3", "assemble the review package" or "build the G5 package". Do not use for the readiness map, use pid-tool-readiness-mapping instead; do not use to produce a missing discipline section, use the discipline skill that owns it. Drafts for human review; never approves, authorises or signs off.

中文简介正在准备中。当前显示原文说明。

Typosquat and malicious-package detection across installed dependencies (or a single prospective addition) — cross-checks AI-malware family intelligence, package-name similarity to known popular packages, low maintainer-health signals. Use when auditing a freshly-onboarded repo, vetting a single suspicious package, gating CI on supply-chain risk, or investigating an incident.

中文简介正在准备中。当前显示原文说明。

Use when running the dev Grafana stack and/or the Playwright e2e suite against a *packaged* plugin zip (a release/RC artifact like `hydrolix-hydrolix-datasource-<ver>.zip`) rather than the working-tree `dist/`. Unpacks the package into a timestamped `dist_<timestamp>/dist` sandbox alongside copies of the compose artifacts, so the run is reproducible and the folder stays available to experiment with afterwards. Delegates stack bring-up to `stack-run` (frozen mode: read-only mount + `DEV=false` so the mage-watcher can't rebuild the packaged Go binary), verifies signature/version, runs the suite, and treats cleanup as optional — the sandbox is deleted only with the user's approval. Apply whenever the task is "test this plugin package / zip" or "run e2e against the built artifact".

中文简介正在准备中。当前显示原文说明。

Turborepo monorepo build system guidance. Triggers on: turbo.json, task pipelines, dependsOn, caching, remote cache, the "turbo" CLI, --filter, --affected, CI optimization, environment variables, internal packages, monorepo structure/best practices, and boundaries. Use when user: configures tasks/workflows/pipelines, creates packages, sets up monorepo, shares code between apps, runs changed/affected packages, debugs cache, or has apps/packages directories.

中文简介正在准备中。当前显示原文说明。

Analyze Swift Package Manager dependencies, package plugins, module variants, and CI-oriented build overhead that slow Xcode builds. Use when a developer suspects packages, plugins, or dependency graph shape are hurting clean or incremental build performance, mentions SPM slowness, package resolution time, build plugin overhead, duplicate module builds from configuration drift, circular dependencies between modules, oversized modules needing splitting, or modularization best practices.

中文简介正在准备中。当前显示原文说明。

Windows アプリ開発 (WinUI 3 / Windows App SDK 2.x) のライフサイクル・ウィンドウ・ 通知・リソース・ウィジェット・配置。AppInstance, 単一インスタンス化, RichActivation, PowerManager、 AppWindow, AppWindowPresenter, OverlappedPresenter, タイトルバー, DisplayArea, Win32 相互運用、 AppNotification, Toast, PushNotificationManager, バッジ通知、ResourceManager, MRT, PRI, ローカライズ、 WidgetProvider, WidgetManager, アダプティブカード、MSIX, 自己完結型, DeploymentManager, PackageVolume, IPackageValidator (パッケージ検証), RuntimeCompatibilityOptions, SemVer, サポート期間, リリースチャネル。

中文简介正在准备中。当前显示原文说明。

Turborepo monorepo build system guidance. Triggers on: turbo.json, task pipelines, dependsOn, caching, remote cache, the "turbo" CLI, --filter, --affected, CI optimization, environment variables, internal packages, monorepo structure/best practices, and boundaries. Use when user: configures tasks/workflows/pipelines, creates packages, sets up monorepo, shares code between apps, runs changed/affected packages, debugs cache, or has apps/packages directories.

中文简介正在准备中。当前显示原文说明。

Deep-dive offensive methodology for dependency confusion and namespace attacks across all major package ecosystems. Covers npm scope confusion exploiting the gap between public and private scoped packages and .npmrc misconfigurations where registry mappings fail to pin internal scopes exclusively. Addresses PyPI namespace attacks through --extra-index-url resolution ordering, NuGet feed priority exploitation when multiple package sources are configured without clear directives, Maven and Gradle repository ordering where artifact resolution traverses repositories sequentially, Go module proxy abuse through GOPROXY misconfiguration, Ruby gems namespace squatting, and Docker image tag confusion with unqualified image references. Provides complete proof-of-concept methodology using safe callbacks including DNS canary via interactsh or Burp Collaborator and HTTP beacon with no destructive payload. Covers reconnaissance techniques for discovering internal package names through GitHub repository analysis, error ...

中文简介正在准备中。当前显示原文说明。

External recon for software supply-chain attack surface — package-namespace squatting candidates, dependency-confusion vulnerabilities, GitHub Actions injection openings, container image registry exposure, SBOM mining, internal-package-name leakage, and CI/CD configuration exposure. Reconnaissance and identification ONLY — actual package publishing / typosquat attacks are EXTERNAL-OFFENSIVE and require explicit written sign-off because they can affect the entire npm/PyPI ecosystem. Use when the target has a public GitHub org, when their build artifacts/SBOMs are reachable, when their docker images are on Docker Hub/GHCR, or when you find internal package names in their JS bundles.

中文简介正在准备中。当前显示原文说明。

使用REA分析已发布的应用、二进制文件、软件包和固件，解释功能并比较版本差异。结合反编译与运行时观察，区分证据、推断和未知事项。

• 调查已发布应用的功能实现
• 比较不同版本的应用行为
• 分析二进制文件和随附资源

配置 Git 提交前的自动处理流程，用 Prettier 格式化待提交文件，再运行现有类型检查和测试，涵盖 Husky 与 lint-staged 的安装、配置及验证。

• 引入提交前自动检查
• 用 Prettier 格式化待提交文件
• 运行现有类型检查和测试

为native Paperclip Runner接入新的执行工具或提供商，从需求整理、通信协议调查到实现、打包，以及在实际环境中验证完整流程。

• 为Runner新增连接
• 调查执行工具的通信协议和能力
• 验证连接的取消与恢复

将摄影工作室的代表作品、制作流程和收费方案整理成黑底亮黄色文字的HTML幻灯片，为潜在客户提供评估委托内容的提案资料。

• 展示摄影工作室的作品
• 向潜在客户说明收费方案
• 制作创意公司的提案资料

发布后核查公开软件包、线上服务和已安装插件，持续跟踪延迟到达的持续集成结果及故障报告，确认问题是否由此次发布引起，并在授权范围内修复。

• 检查已发布软件包的内容
• 验证线上环境的变更路径
• 确认已安装插件的版本

为尚未配置Storybook的项目进行首次安装，查询稳定版以选择安装标签，使用相应的包管理工具，并交由独立的配置技能继续设置。

• 首次为项目安装Storybook
• 根据稳定版选择安装标签
• 使用现有包管理工具安装

检查现有DeerFlow技能，评估发布准备情况、触发条件和安全边界。整理证据与问题，提供可直接采用的修改文本，并区分检查结论与运行验证。

• 检查技能是否具备发布条件
• 调查误触发或未触发的原因
• 检查附带脚本与安全边界

引导完成GAIA智能体性能评估，从环境检查、费用估算到评估运行和结果比较，并制作经过审计、带签名且兼容HAL的提交包，保存结果、费用和经验记录。

• 评估前检查GAIA运行环境
• 估算费用后运行评估
• 将已有结果整理为提交包

根据本机信息检查AGNTCY集成配置，用表格汇总连接地址是否已设置、所需软件包、通信方式和运行记录，并区分尚未实现的功能。

• 确认AGNTCY是否已配置
• 检查SLIM软件包与连接地址配置
• 查看项目中mod的运行记录

Build reusable data packages for local 2D character animation. Define separate body parts, rotation points, layer order, movement limits, and views so a shared renderer can animate each character using its own rig data.

中文简介正在准备中。当前显示英语简介。

• Prepare a 2D character for local animation
• Define joint rotation points and movement limits
• Organize mouths, eyes, and props as separate parts

Publishes oh-my-opencode through GitHub Actions, then checks package versions and release artifacts. Covers related packages, user-facing release summaries, and Discord announcements, reporting failures without starting code repairs during the release process.

中文简介正在准备中。当前显示英语简介。

• Publishing a patch, minor, or major release
• Releasing a specific prerelease version
• Checking related packages and platform binaries

Test omo Codex Light edition in an isolated environment using real Codex and a local mock model. Verify installation, plugin hooks, and terminal startup, with captured evidence and no calls to a real model API.

中文简介正在准备中。当前显示英语简介。

• Verify installation and config.toml changes in isolation
• Confirm plugin hooks run during a real Codex turn
• Check terminal interface startup

Set up a Python environment inside the project and install its packages. Follow existing environment tools when present, avoid changing the system Python, and provide commands that work from a fresh shell.

中文简介正在准备中。当前显示英语简介。

• Set up an environment for a new Python project
• Install packages into an existing project environment
• Resolve an externally-managed-environment installation error

Add timed graphic cards to an existing interview, podcast, or talking-head video. Turn spoken points into titles, quotes, and data callouts, then render an MP4 in a landscape or portrait format while the original clip plays throughout.

中文简介正在准备中。当前显示英语简介。

• Highlight key points in an interview
• Add data callouts to an explainer video
• Package a podcast video for a portrait canvas

Review a Remotion pull request’s title against its code changes and suggest clearer wording for developers. The skill selects the appropriate package or category prefix and highlights the main observable change or public API.

中文简介正在准备中。当前显示英语简介。

• Reviewing a Remotion pull request title
• Naming a public API change clearly
• Choosing a prefix for documentation or test changes