affaan-m/ECC/docs/zh-CN/skills/skill-comply/SKILL.md
skill-comply
Review skill-comply's use cases, installation, workflow, and original source instructions.
- Source repository stars
- 234,327
- Declared platforms
- 0
- Static risk flags
- 0
- Last source update
- 2026-07-27
- Source checked
- 2026-07-28
Decision brief
What it does—and where it fits
通过以下方式测量编码代理是否实际遵循技能、规则或代理定义:
Not for
- Tasks that require unconfirmed production actions or broad system permissions.
- Environments where the pinned source and install steps cannot be inspected.
Compatibility matrix
Platform support, with evidence labels
| Platform | Status | Evidence | What to check |
|---|---|---|---|
| Codex | Not declared | No explicit evidence | Portability before use |
| Claude Code | Not declared | No explicit evidence | Portability before use |
| Cursor | Not declared | No explicit evidence | Portability before use |
| Gemini CLI | Not declared | No explicit evidence | Portability before use |
Installation
Inspect first. Install second.
The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.
npx skills add https://github.com/affaan-m/ECC --skill "docs/zh-CN/skills/skill-comply"Inspect the Agent Skill "skill-comply" from https://github.com/affaan-m/ECC/blob/4e973d3eaf92d97f8d2e2d8abb39d8bdc8711b38/docs/zh-CN/skills/skill-comply/SKILL.md at commit 4e973d3eaf92d97f8d2e2d8abb39d8bdc8711b38. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.
Workflow
What the source asks the agent to do
- 01
支持的目标
技能(skills//SKILL.md):工作流技能,如搜索优先、TDD 指南 规则(rules/common/.md):强制性规则,如 testing.md、security.md、git-workflow.md 代理定义(agents/.md):代理是否在预期时被调用(内部工作流验证尚不支持)
技能(skills//SKILL.md):工作流技能,如搜索优先、TDD 指南规则(rules/common/.md):强制性规则,如 testing.md、security.md、git-workflow.md代理定义(agents/.md):代理是否在预期时被调用(内部工作流验证尚不支持) - 02
何时激活
用户运行 /skill-comply 用户询问"这条规则是否真的被遵循?" 添加新规则/技能后,验证代理合规性 作为质量维护的一部分定期执行
用户运行 /skill-comply用户询问"这条规则是否真的被遵循?"添加新规则/技能后,验证代理合规性 - 03
使用方法
Review the “使用方法” section in the pinned source before continuing.
Review and apply the “使用方法” source section.
Permission review
Static risk signals and limitations
No configured static risk pattern was detected
This is not proof of safety. Runtime behavior, indirect dependencies, and hidden external systems are outside the static scan.
Evidence record
Why each signal appears
| Signal | Value | Evidence type | Meaning |
|---|---|---|---|
| Quality score | 70/100 | Computed | Documentation, specificity, maintenance, and trust rules |
| Repository stars | 234,327 | Source | Repository attention, not individual Skill quality |
| Compatibility | 0 platforms | Source | Declared in the catalog source record |
| Usage guide | catalog record | Editorial | Generated or reviewed according to the visible evidence level |
Pinned source
Provenance and original SKILL.md
- Repository
- affaan-m/ECC
- Skill path
- docs/zh-CN/skills/skill-comply/SKILL.md
- Commit
- 4e973d3eaf92d97f8d2e2d8abb39d8bdc8711b38
- License
- MIT
- Collected
- 2026-07-28
- Default branch
- main
View the original SKILL.md
skill-comply:自动化合规性测量
通过以下方式测量编码代理是否实际遵循技能、规则或代理定义:
- 从任意 .md 文件自动生成预期行为序列(规范)
- 自动生成提示严格程度递减的场景(支持性 → 中性 → 竞争性)
- 运行
claude -p并通过 stream-json 捕获工具调用轨迹 - 使用 LLM(而非正则表达式)将工具调用分类到规范步骤
- 确定性检查时间顺序
- 生成包含规范、提示和时间线的自包含报告
支持的目标
- 技能(
skills/*/SKILL.md):工作流技能,如搜索优先、TDD 指南 - 规则(
rules/common/*.md):强制性规则,如 testing.md、security.md、git-workflow.md - 代理定义(
agents/*.md):代理是否在预期时被调用(内部工作流验证尚不支持)
何时激活
- 用户运行
/skill-comply <path> - 用户询问"这条规则是否真的被遵循?"
- 添加新规则/技能后,验证代理合规性
- 作为质量维护的一部分定期执行
使用方法
# Full run
uv run python -m scripts.run ~/.claude/rules/common/testing.md
# Dry run (no cost, spec + scenarios only)
uv run python -m scripts.run --dry-run ~/.claude/skills/search-first/SKILL.md
# Custom models
uv run python -m scripts.run --gen-model haiku --model sonnet <path>
关键概念:提示独立性
测量技能/规则是否在提示未明确支持时仍被遵循。
报告内容
报告是自包含的,包括:
- 预期行为序列(自动生成的规范)
- 场景提示(每个严格程度级别询问的内容)
- 每个场景的合规性评分
- 带有 LLM 分类标签的工具调用时间线
高级(可选)
对于熟悉钩子的用户,报告还包含针对合规性较低的步骤的钩子提升建议。此为参考信息——主要价值在于合规性本身的可见性。
Alternatives
Compare before choosing
affaan-m/ECC
skill-comply
Visualize whether skills, rules, and agent definitions are actually followed — auto-generates scenarios at 3 prompt strictness levels, runs agents, classifies behavioral sequences, and reports compliance rates with full tool call timelines
affaan-m/ECC
skill-comply
Review skill-comply's use cases, installation, workflow, and original source instructions.