菜单
Upload, list, delete, and get download URLs for files in Kagura Memory's R2 storage (sha256 integrity-bound; an upload can optionally be bound to an owning context for access control). Use when the user wants to attach or manage raw files in their workspace.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Audit .claude/ configuration against current codebase
Store and retrieve zero-knowledge secrets with the `kagura secret` CLI — age recipient encryption, local decrypt (memory-cloud never sees plaintext). Use for keygen/enroll, put/get, grant/revoke/rotate, owner-only delete, exec-with-injected-env, and audit verification.
Manage Kagura Memory authentication — log in (OAuth device flow), check status, refresh tokens, and list or switch profiles. Use when the user wants to sign in to Kagura, see which account/workspace is active, or manage multiple profiles.
Diagnose the local Kagura Memory CLI setup (install, auth, MCP wiring). Use before other kagura skills, or whenever a kagura command reports a blocked or misconfigured environment.
Ingest a document or URL into Kagura Memory — extract text, chunk it, and store an overview plus per-section memories. Use when the user wants to add a PDF, Office/HTML/EPUB file, audio/video, or a web page to their memory graph.
Manage Kagura resource tokens and push external data (Slack/CI/CRM events) into a context. Use for resource token create/list/update/revoke, resource setup/import, and impact/schema stats.
| name | files |
| description | Upload, list, delete, and get download URLs for files in Kagura Memory's R2 storage (sha256 integrity-bound; an upload can optionally be bound to an owning context for access control). Use when the user wants to attach or manage raw files in their workspace. |
Drive the kagura files command group (presigned-PUT uploads with sha256
binding). Thin wrapper around the installed kagura CLI.
kagura --version; if missing → uv tool install kagura-memory (or
pip install kagura-memory), then stop.kagura auth status; if not authed, run the
auth skill first.kagura files upload ./data.bin # upload (sha256-bound presigned PUT)
kagura files upload ./data.bin --binding-context-id <ctx> # bind the file to an owning context for ACL (server v0.41.0+)
kagura files list # list stored files
kagura files download-url <file_id> -c <ctx> # short-lived GET URL (context required, server v0.41.0+)
kagura files delete <file_id> -c <ctx> # delete a file (context required, server v0.41.0+)
download-url when one expires.--binding-context-id (the file's owning context for ACL) is distinct from
--context-id (the workspace). Bound files route read/write/list/delete through
that context's ACL; an unbound upload stays workspace-scoped. A denied download
is reported as a 404 (existence-hiding), not a 403.