用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/zws-im/zws --skill block-malicious-url-entry命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
| name | block-malicious-url-entry |
| description | Block a malicious zws short URL, destination URL, or hostname in production PostgreSQL and Redis. |
Block the destination hostname, not zws.im. Production defaults to Railway environment production, service API.
zws.im short URL. Stop if the hostname is ambiguous or belongs to a shared platform.railway status and confirm project zws, environment production, and service API.apps/api, run railway run --service API --environment production -- node scripts/block-malicious-url.ts --dry-run --hostname '<hostname>' (or pass --url/--target-url). Review the resolved hostname and whether it is already blocked.--apply. The script inserts the hostname, refreshes Redis, and verifies the supplied short URL when --url is used.The script intentionally does not bulk-update urls.blocked: retrieval checks the hostname block and lazily marks each matching row. Never print connection strings, credentials, or full environment output. Confirm the resolved hostname before applying.
