菜单
Trace consent provenance. Auto-run when: work touches files containing personal data (profiles/, agents processing person names), after adding new data sources or storage, or user asks about consent or data protection. Invoke proactively without asking.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Background CI monitor for a PR. Auto-run when: PostToolUse detects a PR was just created (suggests it with PR number), user asks to watch CI, or after pushing to a branch with an open PR. Takes PR number as argument. Invoke proactively without asking.
Run the health monitor and report results. Auto-run when: session-context shows health is degraded or failed, after infrastructure changes (docker, systemd), when a service appears unreachable, or user asks about system health. Invoke proactively without asking.
Audit installed flatpak apps and find native alternatives. Auto-run when: storage-audit reveals large flatpak usage, operator mentions app performance issues related to sandboxing, or user asks about flatpaks. Invoke proactively without asking.
Audit branches across all repos and clean up. Auto-run when: session-context reports >3 non-main branches across repos, no-stale-branches hook blocks a branch create, after merging PRs, or user asks about branch cleanup. Invoke proactively without asking.
Scan for and resolve merge conflict markers. Auto-run when: conflict-marker-scan PostToolUse hook fires a warning, git merge/rebase/cherry-pick output shows CONFLICT (PostToolUse suggests it), or user asks to fix conflicts. Invoke proactively without asking.
Full service triage. Auto-run when: a service is unreachable (connection refused, timeout), systemctl shows a failed unit (PostToolUse suggests it), session-context reports failed units, or user mentions something is broken/down/crashed. Takes optional service name as argument. Invoke proactively without asking.
| name | consent-trace |
| description | Trace consent provenance. Auto-run when: work touches files containing personal data (profiles/, agents processing person names), after adding new data sources or storage, or user asks about consent or data protection. Invoke proactively without asking. |
Check consent coverage across all stored data:
curl -s http://localhost:8051/consent/coverage | python3 -c "import sys,json; d=json.load(sys.stdin); print(f\"Consent coverage: {d.get('with_consent_label',0)}/{d.get('total_points',0)} points labeled ({d.get('coverage_pct',0)}%)\nWith provenance: {d.get('with_provenance',0)}\nUnlabeled (public): {d.get('unlabeled',0)}\")"
To trace consent for a specific file, use:
curl -s "http://localhost:8051/consent/trace?source=/path/to/file.md" | python3 -m json.tool
To list active consent contracts:
curl -s http://localhost:8051/consent/contracts | python3 -m json.tool
Explain the results: what consent labels mean, which contracts justify data storage, what would happen on revocation, and what data is unprotected (public by default).