By SummerSec
Agent 开发生态插件:skill-creator(技能创建)、plugin-dev(插件开发技能链)、hookify(Hook 编写)、agent-sdk-dev(Agent SDK)、claude-agents-symlink(CLAUDE/AGENTS 软链接统一)、multi-platform-plugin-guide(版本对齐)、workflow-skill-creator(流程编排 Skill 设计)
Use when creating, reviewing, or verifying Claude Agent SDK applications in Python or TypeScript, including new SDK app scaffolding guidance, SDK setup checks, verifier-agent style reviews, dependency/version checks, and best-practice audits.
将项目根目录的 Claude 记忆文件统一为指向根目录 AGENTS 文件的软链接。用于用户要求把 `CLAUDE.md` 或 `claude.md` 指向 `AGENTS.md` 或 `agents.md`、希望批量统一多个项目的根目录记忆文件,或需要兼容 Windows、macOS、Linux 的跨平台软链接处理流程时。
用于维护 SumSec-Skills 多平台插件元数据与发布清单:package.json、plugin.json、Claude/Cursor/Codex manifest、marketplace JSON、版本号、描述、关键词、安装文档。
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
优化、审查或诊断 Agent Skills(SKILL.md)。用于 skill 质量分析、重构技能、skills 不触发、skill 没生效、optimize skills、analyze skills、check my skills。
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
SummerSec 个人 Agent Skills 集合,按类别分插件管理。

SumSec-Skills/
├── writing-zh/ # 中文写作插件
│ └── skills/
│ ├── humanizer-zh/ 去 AI 味润色
│ ├── creating-blog-web-ppt/ 文章转网页 PPT
│ ├── khazix-writer/ 卡兹克写作风格 (khazix-skills)
│ └── sumsec-illustrations/ SumSec 博客正文配图
├── media-tools/ # 媒体生成插件
│ └── skills/
│ ├── draw-image-generation/ AI 图片生成
│ └── remotion-best-practices/ Remotion 视频
├── dev-tools/ # 开发工具插件
│ └── skills/
│ ├── git-commit-pr/ Git 提交与 PR
│ ├── agent-chat-history/ 对话历史检索
│ ├── frontend-design/ 前端界面实现
│ └── baoyu-design/ UI 设计稿与原型生成
├── agents-dev/ # Agent 开发生态插件(聚合)
│ └── skills/
│ ├── skill-creator/ 技能创建(claude-plugins-official)
│ ├── writing-rules/ Hook rules 生成(hookify)
│ ├── agent-sdk-dev/ Agent SDK 开发
│ ├── claude-agents-symlink/ CLAUDE.md 指向 AGENTS.md
│ ├── skill-optimizer/ Skill 审计优化
│ ├── multi-platform-plugin-guide/ 多平台版本对齐
│ └── workflow-skill-creator/ 流程编排 Skill 设计
├── skills/ # 通用 skill 聚合入口(symlink 到各插件 skills)
├── plugin-dev/ # 镜像:插件开发七件套(agent/command/hook/skill/MCP/structure/settings)
├── claude-md-management/ # 镜像:CLAUDE.md 维护
├── claude-code-setup/ # 镜像:Claude Code 自动化建议
├── hookify/ # 原创:Hook 创建工具
├── cloudflare-email/ # Cloudflare 临时邮箱插件
├── taste-skill/ # Taste Skill 跨平台插件封装
├── openclaw.plugin.json # OpenClaw 插件清单
├── openclaw/ # OpenClaw 插件入口 & skills
├── opencode/ # OpenCode 插件入口 & rules
├── hermes/ # Hermes skills & context
├── .claude-plugin/ # 根 marketplace
├── .cursor-plugin/
├── .codex-plugin/
├── .agents/plugins/
├── .cursor/rules/
├── khazix-skills/ # submodule: KKKKhazix/khazix-skills
├── taste-skill-upstream/ # submodule: Leonxlnx/taste-skill
├── AGENTS.md
├── README.md
├── package.json
└── plugin.json
/plugin marketplace add https://github.com/SummerSec/SumSec-Skills.git
/plugin install writing-zh@sumsec-skills
/plugin install media-tools@sumsec-skills
/plugin install dev-tools@sumsec-skills
/plugin install agents-dev@sumsec-skills
/plugin install plugin-dev@sumsec-skills
/plugin install claude-md-management@sumsec-skills
/plugin install claude-code-setup@sumsec-skills
/plugin install hookify@sumsec-skills
/plugin install cloudflare-email@sumsec-skills
/plugin install taste-skill@sumsec-skills
codex plugin marketplace add SummerSec/SumSec-Skills --ref master
然后在 Codex 的 /plugins 里选择 SumSec Skills,按需安装 writing-zh、media-tools、dev-tools、agents-dev、plugin-dev、claude-md-management、claude-code-setup、hookify、cloudflare-email、taste-skill 等插件。仓库内的 .agents/plugins/marketplace.json 是 repo-scoped marketplace,每个插件条目使用 source: "local" + 对应子目录 path(如 ./writing-zh)指向当前 checkout;Git 获取由 codex plugin marketplace add 管理,不在插件条目里写 url/ref。
Codex 也会直接扫描仓库级 .agents/skills/,适合放仅服务本仓的工具型 skill;需要分发给其他项目或团队时,应打包进 .codex-plugin/plugin.json 所描述的插件。
将 <plugin>/skills/<skill-name>/ 链接到对应客户端 skill 目录:
ln -sf "$(pwd)/dev-tools/skills/git-commit-pr" ~/.claude/skills/git-commit-pr
| 客户端 | skill 目录/安装方式 |
|---|---|
| Claude Code | /plugin install <plugin>@sumsec-skills |
| Cursor | .cursor-plugin/marketplace.json 导入 |
| OpenAI Codex CLI | codex plugin marketplace add SummerSec/SumSec-Skills --ref master |
| OpenClaw | openclaw.plugin.json + openclaw/ 插件加载 |
| OpenCode | opencode/plugins/sumsec-skills.js 插件注册 |
| Hermes | hermes/skills/sumsec-skills/SKILL.md 复制加载 |
| 通用 symlink | ~/.agents/skills/<name>/ -> <plugin>/skills/<name>/ |
| 技能 | 来源 | 说明 |
|---|---|---|
| humanizer-zh | 本仓库 | 去 AI 味:本地 CLI + 深度指南,反 AI 审查二遍工作流 |
| creating-blog-web-ppt | 本仓库 | Markdown 文章转网页 PPT(slide-writer + blog-sumsec 主题) |
| khazix-writer | khazix-skills | 卡兹克写作风格:用特定口吻和节奏写公众号长文 |
| sumsec-illustrations | 本仓库 | 为 sumsec.me 风格文章生成 SumSec Observer 正文配图 |
| 技能 | 说明 |
|---|---|
| draw-image-generation | 调用 Right.Codes API 生成 AI 图片 |
| remotion-best-practices | Remotion React 视频最佳实践 |
npx claudepluginhub summersec/sumsec-skills --plugin agents-devShiroAttack2 — Shiro-550 漏洞利用工具:密钥爆破、Gadget 链探测、命令执行、内存马注入、Key 修改。
Apache Shiro-550 漏洞利用 CLI:单目标探测、密钥爆破、Gadget 链自动检测、命令执行、内存马注入、Key 修改。
Makes Claude Code sessions expose a visible Inner OS monologue layer in the format ▎InnerOS:...
Tools to maintain and improve CLAUDE.md files - audit quality, capture session learnings, and keep project memory current.
Easily create hooks to prevent unwanted behaviors by analyzing conversation patterns
Matt Pocock's agent skills for real engineering — grilling, spec/ticket flows, TDD, code review, domain modelling and more. Plug-and-play, not vibe coding.
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer
Comprehensive feature development workflow with specialized agents for codebase exploration, architecture design, and quality review
Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques
Design fluency for frontend development. 1 skill with 23 commands (/impeccable polish, /impeccable audit, /impeccable critique, etc.) and curated anti-pattern detection.
Harness-native ECC operator layer - 67 agents, 278 skills, 94 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses