跳到正文
cccskills
免费在 GitHub 公开

security-check

Scan staged changes before a commit and commit history before a push for API keys, access tokens, and other common credentials. The guidance explains how to replace exposed values, move them to environment variables, and clean affected history.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

提交或推送前的安全检查,扫描 API Key、访问令牌等敏感信息。

实测评分 未实测

查看安装方法

适用场景

  • Checking staged changes for credentials before committing
  • Scanning commits for secrets before pushing
  • Finding and cleaning commits that contain sensitive values

包含的文件(3)

  • SKILL.md1.6 KB
  • scripts/security_check.sh1.5 KB
  • scripts/security_reset.sh4.1 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

安全检查

在提交和推送代码前,必须检查是否包含敏感信息,特别是 API Keys 和访问令牌。

检查内容

API Keys 和访问令牌

  • sk- 开头的 API Keys(如 OpenAI、Anthropic、阿里云等)
  • AIzaSy 开头的 Google API Keys
  • pk_ 开头的公钥
  • 其他常见的 API 令牌格式

提交前(Commit)

先进行检查

bash skills/security-check/scripts/security_check.sh commit

若未输出 staging area is clear,说明暂存区存在敏感信息。

若存在敏感信息

  1. 立即删除或替换:将真实 API Key 替换为占位符
  2. 使用环境变量:将敏感信息移到环境变量中
  3. 添加到 .gitignore:确保包含敏感信息的文件不被提交
  4. 必须拒绝提交和推送动作

推送前(Push)

先进行检查

bash skills/security-check/scripts/security_check.sh push

若未输出 all commits are clear,说明存在敏感信息,相关 commit hash 已写入 task/sensitive_commits.txt。

若存在敏感信息

  1. 立即删除或替换:将真实 API Key 替换为占位符
  2. 使用环境变量:将敏感信息移到环境变量中
  3. 添加到 .gitignore:确保包含敏感信息的文件不被提交
  4. 必须使用下面的脚本清理历史记录
# 根据 task/sensitive_commits.txt 中的检查结果 reset,避免 commit 记录泄密
bash skills/security-check/scripts/security_reset.sh
  1. 必须拒绝提交和推送动作

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Review LoongCollector code changes for concrete defects, security risks, and architectural mismatches. It tracks review history to focus on new changes and produces evidence-backed findings, lifecycle checks, and practical fix and validation plans.

中文简介正在准备中。当前显示英语简介。

  • Review a pull request for security or behavior regressions
  • Recheck whether earlier review comments were fixed
  • Assess a branch change with architecture context
alibaba/loongcollector22072026年10月24日 更新

commit

免费

Use this skill to turn a Git diff or supplied change context into a clear Conventional Commits message. It selects a change type and optional scope, explains the reason and impact, and can include issue or breaking change references.

中文简介正在准备中。当前显示英语简介。

  • Writing a commit message from a Git diff
  • Choosing a Conventional Commits type and scope
  • Describing why a change was made
alibaba/loongcollector22072026年10月24日 更新

compile

免费

Build LoongCollector’s C++ core and Go plugins, run C++ unit tests, or create end-to-end and release images. The guide helps choose CI-aligned Docker builds or local CMake workflows, with commands and setup notes for each target.

中文简介正在准备中。当前显示英语简介。

  • Build the C++ core using the CI-aligned workflow
  • Run all or selected C++ unit tests
  • Compile Go plugins locally or in CI style
alibaba/loongcollector22072026年10月24日 更新

Use this skill to write or review technical design documents with a consistent structure. It covers problem context, goals, architecture and flows, concurrency, errors, deployment, and unit tests, with guidance for diagrams, test cases, and design constraints.

中文简介正在准备中。当前显示英语简介。

  • Drafting a technical design document
  • Reviewing a design for missing sections
  • Documenting architecture and key flows
alibaba/loongcollector22072026年10月24日 更新

e2e

免费

Use this skill to design, write, run, and debug LoongCollector end-to-end tests. It explains feature scenarios, registered steps, local Docker Compose execution, log inspection, and common configuration pitfalls so agents can work through test failures.

中文简介正在准备中。当前显示英语简介。

  • Planning coverage for a new end-to-end test
  • Writing a feature scenario with registered steps
  • Running one Docker Compose test case locally
alibaba/loongcollector22072026年10月24日 更新

Learn how the LoongCollector end-to-end test framework connects feature scenarios to Go behavior functions. Use the guide to write BDD test cases, add and register custom steps, and understand existing test actions for setup, triggers, verification, and cleanup.

中文简介正在准备中。当前显示英语简介。

  • Understanding the E2E test framework structure
  • Writing feature files with scenarios and steps
  • Adding and registering a custom Go behavior function
alibaba/loongcollector22072026年10月24日 更新

查看 alibaba 的全部技能

报告此技能的问题