By SummerSec
Developer utilities plugin with git workflows, agent history lookup, Context7 docs, Ponytail minimal-solution skills, frontend implementation, UI prototyping, and a bundled Ponytail MCP server.
按 YYYY-MM-DD 在 Windows/macOS/Linux 检索本机聊天与 Agent 会话历史(Claude Code 项目 jsonl、Codex CLI history.jsonl、Cursor workspaceStorage 与 state.vscdb);可只导出用户提示词。用户要查看或导出某日记录、按天筛 jsonl/SQLite、只抽提示词、排查历史丢失或做只读审计时使用。
Create polished design artifacts as self-contained HTML: UI mockups, interactive prototypes, wireframes, landing pages, dashboards, app screens, mobile apps, slide decks (a.k.a. PPT / PowerPoint presentations), and visual explorations. Use whenever the user asks to design, mock up, prototype, wireframe, visualize, explore, or make a PPT/deck for an interface, product screen, user flow, content layout, visual artifact, or pitch/deck concept, even if they do not say "design". Also use to export a deck built with this skill to PowerPoint (PPT/PPTX) — but only decks authored here (deck-stage / this skill's slide-structured HTML), NOT arbitrary HTML, so confirm the target is such a deck first. Also use for setting up, importing, or authoring reusable design systems, UI kits, brand tokens, or component libraries. Harness-agnostic for Claude Code, Cursor, Codex Agent, and similar file-capable agents.
Use the ctx7 CLI to fetch library documentation, manage AI coding skills, and configure Context7 MCP. Activate when the user mentions "ctx7" or "context7", needs current docs for any library, wants to install/search/generate skills, or needs to set up Context7 for their AI coding agent.
This skill should be used when the user asks about libraries, frameworks, API references, or needs code examples. Activates for setup questions, code generation involving libraries, or mentions of specific frameworks like React, Vue, Next.js, Prisma, Supabase, etc.
Retrieves up-to-date documentation, API references, and code examples for any developer technology. Use this skill whenever the user asks about a specific library, framework, SDK, CLI tool, or cloud service — even for well-known ones like React, Next.js, Prisma, Express, Tailwind, Django, or Spring Boot. Your training data may not reflect recent API changes or version updates. Always use for: API syntax questions, configuration options, version migration issues, "how do I" questions mentioning a library name, debugging that involves library-specific behavior, setup instructions, and CLI tool usage. Use even when you think you know the answer — do not rely on training data for API details, signatures, or configuration options as they are frequently outdated. Always verify against current docs. Prefer this over web search for library documentation and API details.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
SummerSec 个人 Agent Skills 集合,按类别分插件管理。

SumSec-Skills/
├── writing-zh/ # 中文写作插件
│ └── skills/
│ ├── humanizer-zh/ 去 AI 味润色
│ ├── creating-blog-web-ppt/ 文章转网页 PPT
│ ├── khazix-writer/ 卡兹克写作风格 (khazix-skills)
│ └── sumsec-illustrations/ SumSec 博客正文配图
├── media-tools/ # 媒体生成插件
│ └── skills/
│ ├── draw-image-generation/ AI 图片生成
│ └── remotion-best-practices/ Remotion 视频
├── dev-tools/ # 开发工具插件
│ └── skills/
│ ├── git-commit-pr/ Git 提交与 PR
│ ├── agent-chat-history/ 对话历史检索
│ ├── frontend-design/ 前端界面实现
│ └── baoyu-design/ UI 设计稿与原型生成
├── agents-dev/ # Agent 开发生态插件(聚合)
│ └── skills/
│ ├── skill-creator/ 技能创建(claude-plugins-official)
│ ├── writing-rules/ Hook rules 生成(hookify)
│ ├── agent-sdk-dev/ Agent SDK 开发
│ ├── claude-agents-symlink/ CLAUDE.md 指向 AGENTS.md
│ ├── skill-optimizer/ Skill 审计优化
│ ├── multi-platform-plugin-guide/ 多平台版本对齐
│ └── workflow-skill-creator/ 流程编排 Skill 设计
├── skills/ # 通用 skill 聚合入口(symlink 到各插件 skills)
├── plugin-dev/ # 镜像:插件开发七件套(agent/command/hook/skill/MCP/structure/settings)
├── claude-md-management/ # 镜像:CLAUDE.md 维护
├── claude-code-setup/ # 镜像:Claude Code 自动化建议
├── hookify/ # 原创:Hook 创建工具
├── cloudflare-email/ # Cloudflare 临时邮箱插件
├── taste-skill/ # Taste Skill 跨平台插件封装
├── openclaw.plugin.json # OpenClaw 插件清单
├── openclaw/ # OpenClaw 插件入口 & skills
├── opencode/ # OpenCode 插件入口 & rules
├── hermes/ # Hermes skills & context
├── .claude-plugin/ # 根 marketplace
├── .cursor-plugin/
├── .codex-plugin/
├── .agents/plugins/
├── .cursor/rules/
├── khazix-skills/ # submodule: KKKKhazix/khazix-skills
├── taste-skill-upstream/ # submodule: Leonxlnx/taste-skill
├── AGENTS.md
├── README.md
├── package.json
└── plugin.json
/plugin marketplace add https://github.com/SummerSec/SumSec-Skills.git
/plugin install writing-zh@sumsec-skills
/plugin install media-tools@sumsec-skills
/plugin install dev-tools@sumsec-skills
/plugin install agents-dev@sumsec-skills
/plugin install plugin-dev@sumsec-skills
/plugin install claude-md-management@sumsec-skills
/plugin install claude-code-setup@sumsec-skills
/plugin install hookify@sumsec-skills
/plugin install cloudflare-email@sumsec-skills
/plugin install taste-skill@sumsec-skills
codex plugin marketplace add SummerSec/SumSec-Skills --ref master
然后在 Codex 的 /plugins 里选择 SumSec Skills,按需安装 writing-zh、media-tools、dev-tools、agents-dev、plugin-dev、claude-md-management、claude-code-setup、hookify、cloudflare-email、taste-skill 等插件。仓库内的 .agents/plugins/marketplace.json 是 repo-scoped marketplace,每个插件条目使用 source: "local" + 对应子目录 path(如 ./writing-zh)指向当前 checkout;Git 获取由 codex plugin marketplace add 管理,不在插件条目里写 url/ref。
Codex 也会直接扫描仓库级 .agents/skills/,适合放仅服务本仓的工具型 skill;需要分发给其他项目或团队时,应打包进 .codex-plugin/plugin.json 所描述的插件。
将 <plugin>/skills/<skill-name>/ 链接到对应客户端 skill 目录:
ln -sf "$(pwd)/dev-tools/skills/git-commit-pr" ~/.claude/skills/git-commit-pr
| 客户端 | skill 目录/安装方式 |
|---|---|
| Claude Code | /plugin install <plugin>@sumsec-skills |
| Cursor | .cursor-plugin/marketplace.json 导入 |
| OpenAI Codex CLI | codex plugin marketplace add SummerSec/SumSec-Skills --ref master |
| OpenClaw | openclaw.plugin.json + openclaw/ 插件加载 |
| OpenCode | opencode/plugins/sumsec-skills.js 插件注册 |
| Hermes | hermes/skills/sumsec-skills/SKILL.md 复制加载 |
| 通用 symlink | ~/.agents/skills/<name>/ -> <plugin>/skills/<name>/ |
| 技能 | 来源 | 说明 |
|---|---|---|
| humanizer-zh | 本仓库 | 去 AI 味:本地 CLI + 深度指南,反 AI 审查二遍工作流 |
| creating-blog-web-ppt | 本仓库 | Markdown 文章转网页 PPT(slide-writer + blog-sumsec 主题) |
| khazix-writer | khazix-skills | 卡兹克写作风格:用特定口吻和节奏写公众号长文 |
| sumsec-illustrations | 本仓库 | 为 sumsec.me 风格文章生成 SumSec Observer 正文配图 |
| 技能 | 说明 |
|---|---|
| draw-image-generation | 调用 Right.Codes API 生成 AI 图片 |
| remotion-best-practices | Remotion React 视频最佳实践 |
ShiroAttack2 — Shiro-550 漏洞利用工具:密钥爆破、Gadget 链探测、命令执行、内存马注入、Key 修改。
Apache Shiro-550 漏洞利用 CLI:单目标探测、密钥爆破、Gadget 链自动检测、命令执行、内存马注入、Key 修改。
Makes Claude Code sessions expose a visible Inner OS monologue layer in the format ▎InnerOS:...
Analyze codebases and recommend tailored Claude Code automations such as hooks, skills, MCP servers, and subagents.
Cloudflare temp mail agent skill for reading inbox messages, fetching parsed mail, and sending email with an Address JWT.
npx claudepluginhub summersec/sumsec-skills --plugin dev-toolsHarness-native ECC operator layer - 67 agents, 278 skills, 94 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
Memory compression system for Claude Code - persist context across sessions
Access thousands of AI prompts and skills directly in your AI coding assistant. Search prompts, discover skills, save your own, and improve prompts with AI.
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer
Evidence-gated AI coding workflow: scan → analyze → plan → TDD → execute → fix → verify → review, powered by Codebase Memory MCP >= 0.9.0 with optional Serena LSP intelligence. Includes blast-radius planning, test/cycle gates, independent review, and Windows Git Bash hook auto-resolution.
Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.