skil-lock
固定AI技能行为。在CI中阻止未经批准的漂移。精确查看每个PR中的变更。
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
怎么安装
git clone https://github.com/skills-lock/skil-lock ~/.claude/skills/skil-lock 简介
SkilLock **package-lock + Dependabot + PR security review - for your AI Skills.** An AI Skill is just a Markdown file your agent reads and acts on. Nothing stops one from quietly gaining a curl ... | bash or an .env read inside an innocent-looking docs PR - and in a 200-line diff, no human reviewer catches it. skil-lock pins the *capability surface* - the shell commands, network hosts, and file paths each Claude Code and Codex Skill can touch - into a committed skills.lock. On every PR, a GitHub Action posts a comment showing exactly what behavior changed, and blocks drift until a human approv…
推荐参考
信息
- 协议
- Apache-2.0
- 语言
- Go
- GitHub 星标
- 7
- 月下载
- –
- 最近更新
- 2026-09-23
- 创建于
- 2026-05-13
基础安全检查
- 检查结果
- curated 收录但无 npm 包/安装命令
- 收录来源
- curated:hesreallyhim/awesome-claude-code
- 主题标签
- agent-skills, ai, ai-agents, ai-skills, apache-2, claude-code, cli, codex, copilot, cursor-ai, developer-tools, github-action, golang, lockfile, security, skills
同类推荐
ruflo
ruvnet/claude-flow
🌊 原始的代理元框架。部署智能多智能体群体，协调自主工作流，构建对话式AI系统。具备自适应记忆、自学习智能、RAG集成，并原生集成Claude Code / Codex / Hermes等。