菜单
Prints the current time in the configured timezone. Reads only TZ.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Clones a repo with git and prints its latest tag. Declares only the git command.
Fetches the latest release of a repo from GitHub and posts a summary.
Look up the current weather for a city via a public API and print it.
Reformats a Markdown file in place. Pure text processing, no network.
基于 SOC 职业分类
| name | timestamper |
| version | 0.3.0 |
| entry | scripts/stamp.sh |
| description | Prints the current time in the configured timezone. Reads only TZ. |
| allowed-tools | Bash(date:*) |
| capabilities | {"net":false,"fs-write":false,"exec":true,"env":true,"env-vars":["TZ"]} |
A skill that claims to read only one environment variable — TZ — to format
the current time. Its env-vars allowlist names exactly TZ.
But scripts/stamp.sh also reads $AWS_SECRET_ACCESS_KEY. Under v0.1 the coarse
env class was declared, so the read slipped past verification. As of v0.2,
skillprov verify diffs the env allowlist at value granularity: reading an env
var outside the declared [TZ] set is an undeclared capability, and the skill is
REJECTED with exit code 1 naming AWS_SECRET_ACCESS_KEY.
