nm 抽象技能创作

SKILL研究检索

原名 nm-abstract-skill-authoring

研究检索 联网访问 许可证明确 OpenClaw
安装这个技能

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

累计安装 4,121 本周 177
GitHub 星标 未标注 仓库 nm-abstract-skill-authoring
下载量 1,444 技能市场下载数
权限级别 联网访问 安装前请确认风险范围
许可证 许可证明确 MIT-0

安装

ClawHub 市场
在支持 Skills 的客户端里执行,装完问一句「你有哪些技能」验证
openclaw skills install nm-abstract-skill-authoring

技能档案

研究检索
字段来自技能仓库与公开索引,中文说明由本站标注
作者 / 维护方athola仓库 nm-abstract-skill-authoring · 版本 1.8.3
宿主客户端OpenClaw技能可被这些客户端加载
安装方式ClawHub 市场安装包 athola/nm-abstract-skill-authoring
权限级别联网访问安装前请确认风险范围
许可证MIT-0许可证明确,商用前请自行确认条款
仓库可用性available技能仓库当前是否可访问
最近核验2026-05-01上游最后核验时间 · 数据更新 未标注
正文体量8.4 KBSKILL.md 原文大小,越大说明说明书写得越细

能做什么

5 项能力
上游给出的能力概览与适用场景
  • 按任务关键词查找相关 Skills
  • 展示可复制的安装命令
  • 保留来源站点、仓库和原始说明,方便继续核验
  • 补充不同宿主或平台的使用分布数据
  • 展示第三方安全扫描或审计结果
OpenClaw 用户查找和安装 Skill 时用户想查找某类 Agent Skill 时需要根据任务场景推荐可安装能力包时需要对比不同来源的安装命令和来源信息时

权限与风险

联网访问
装之前先读完这段

安装与使用指南

安装步骤

本站只展示命令,不托管安装包,也不自动执行。

怎么用

安装后应在对应宿主中按原始 README 的触发条件使用;当前草稿只做目录说明,具体调用方式由规则抽取,异常条目再复核。

SKILL.md 全文

8.4 KB
模型实际读到的说明书原文,来自技能仓库

> Night Market Skill — ported from claude-night-market/abstract. For the full experience with agents, hooks, and commands, install the Claude Code plugin.

Skill Authoring Guide

Overview

Writing effective Claude Code skills requires Test-Driven Development (TDD) and persuasion principles from compliance research. We treat skill writing as process documentation that needs empirical validation rather than just theoretical instruction. Skills are behavioral interventions designed to change model behavior in measurable ways.

By using TDD, we ensure skills address actual failure modes identified through testing. Optimized descriptions improve discovery, while a modular structure supports progressive disclosure to manage token usage. This framework also includes anti-rationalization patterns to prevent the assistant from bypassing requirements.

The Iron Law

NO SKILL WITHOUT A FAILING TEST FIRST

Every skill must begin with documented evidence of Claude failing without it. This validates that you are solving a real problem. No implementation should proceed without a failing test, and no completion claim should be accepted without evidence. Detailed enforcement patterns for adversarial verification and coverage gates are available in imbue:proof-of-work.

Skill Types

We categorize skills into three types: Technique skills for specific methods, Pattern skills for recurring solutions, and Reference skills for quick lookups and checklists. This helps organize interventions into the most effective format for the task.

Quick Start

Skill Analysis

```bash

Analyze skill complexity

python scripts/analyze.py

Estimate tokens

python scripts/tokens.py
```

Validation

```bash

Validate skill structure

python scripts/abstract_validator.py --check
```

Verification: Run analysis and review token estimates before proceeding.

Description Optimization

Skill descriptions must be optimized for semantic search and explicit triggering. Follow the formula [What it does] + [When to use it] + [Key triggers]. Use a third-person voice (e.g., "Guides...", "Provides...") and include specific, concrete use cases. Avoid marketing language or vague phrases like "helps with coding."

Skill Character Budget (Claude Code 2.1.32+)

Skill description character budgets now scale with context window at 2% of available context. This means:

Context Window Description Budget
200K (Sonnet/Haiku) ~4,000 characters
1M (Opus 4.6 GA) ~20,000 characters

Previously constrained skills can use more descriptive text on larger windows. However, keep descriptions concise regardless — longer is not better. The scaling primarily prevents truncation for skills with legitimately complex trigger conditions, not as an invitation to add verbose content.

Plugin Name Auto-Display (Claude Code 2.1.33+)

Plugin names are now automatically shown alongside skill descriptions in the /skills menu. Do not repeat the plugin name in skill descriptions — it is redundant and wastes character budget. Focus descriptions on what the skill does and when to use it.

The TDD Cycle for Skills

RED Phase: Document Baseline Failures

Establish empirical evidence that an intervention is needed. Create at least three pressure scenarios that combine time pressure and ambiguity. Run these in a fresh instance without the skill active and document the exact failures, such as skipped error handling or missing validation.

GREEN Phase: Minimal Skill Implementation

Create the smallest intervention that addresses the documented failures. Write the SKILL.md with required frontmatter and content that directly counters the baseline failures. Include one example of correct behavior and verify that the same pressure scenarios now show measurable improvement.

REFACTOR Phase: Anti-Rationalization

Eliminate the ability for Claude to explain away requirements. Run pressure scenarios with the skill active to identify common rationalizations, such as claiming a task is "too simple" for the full process. Add explicit counters, such as exception tables and red flag lists, until rationalizations stop.

Anti-Rationalization

Skills must explicitly counter patterns where Claude attempts to bypass requirements. Common excuses include claiming a task is "too simple" or that a "spirit vs letter of the law" approach is sufficient. Skills should include red flag lists for self-checking, such as "Stop if you think: this is too simple for the full process." When exceptions are necessary, document them explicitly to prevent unauthorized shortcuts.

Module References

For detailed implementation guidance:
- TDD Methodology: See modules/tdd-methodology.md for RED-GREEN-REFACTOR cycle details
- Persuasion Principles: See modules/persuasion-principles.md for compliance research and techniques
- Description Writing: See modules/description-writing.md for discovery optimization
- Progressive Disclosure: See modules/progressive-disclosure.md for file structure patterns
- Anti-Rationalization: See modules/anti-rationalization.md for bulletproofing techniques
- Graphviz Conventions: See modules/graphviz-conventions.md for process diagram standards
- Testing with Subagents: See abstract:subagent-testing skill for pressure testing methodology
- Deployment Checklist: See modules/deployment-checklist.md for final validation

Deployment and Quality Gates

Before deploying, verify that the RED, GREEN, and REFACTOR phases are complete and documented. Frontmatter must be valid, descriptions optimized, and line counts kept under 500 lines. Ensure all module references are valid and at least one concrete example is included.

Scribe Validation

All markdown files must pass scribe validation. This includes a slop scan to ensure a score under 2.5 and doc verification to confirm all file paths and command examples work. Bullet-to-prose ratios must remain under 60% to maintain readability. Use Skill(scribe:slop-detector) and Agent(scribe:doc-verifier) for these checks.

Integration and Best Practices

Individual skills are created using skill-authoring, while modular-skills handles the architecture of larger structures. skills-eval provides ongoing quality assessment. Avoid the common pitfall of writing skills based on theoretical behavior; always use documented failures to guide development. Use progressive disclosure to prevent monolithic files and ensure that each intervention remains focused and token-efficient.

Skill Directory Variable (2.1.69+)

Skills can reference their own directory using
${CLAUDE_SKILL_DIR} in SKILL.md content. This
variable resolves to the absolute path of the
directory containing the SKILL.md file. Use it for
referencing sibling files, data assets, or module
paths without hardcoding absolute paths:

See `${CLAUDE_SKILL_DIR}/modules/advanced.md`
for detailed patterns.

Run: `python3 ${CLAUDE_SKILL_DIR}/scripts/check.py`

This is especially useful for skills that ship
alongside scripts or data files and need portable
path references that work regardless of where the
plugin is installed.

Description Colon Fix (2.1.69+)

Skill descriptions containing colons (e.g.,
description: "Triggers include: X, Y, Z") previously
failed to load from SKILL.md frontmatter. This is
fixed in 2.1.69. Skills without a description: field
also now appear in the available skills list (previously
they were silently excluded).

Troubleshooting

Common Issues

Skill not loading
Check YAML frontmatter syntax and required fields.
As of 2.1.69, skills without a description: field
still appear in the skills list, but descriptions
with colons must be quoted in YAML frontmatter.

Token limits exceeded
Use progressive disclosure - move details to modules

Modules not found
Verify module paths in SKILL.md are correct

安全信息

审计结论
未标注不代表已通过审计
安全审计VirusTotal、ClawScan、Static analysis第三方安全审计平台给出的结论

热门专题

按场景挑技能
全部专题 →

技能内容以作者仓库为准;分类、权限级别与许可证状态的中文说明为中文整理,最近核验 2026-05-01。