生成时间: 2026-07-31 20:03 CST · 对比基准: 2026-07-25 · VM-0-5-ubuntu
2026-07-25 → 2026-07-31 技能资产变化明细
| 来源 | 上周 (07-25) | 本周 (07-31) | 变化 |
|---|---|---|---|
| Hermes Skills | 143 | 149 | ↑ +6 |
| MCP 服务器 | 8 | 7 | ↓ -1 |
| Agent Skills (.agents) | 2 | 2 | → 0 |
| Claude Skills | 0 | 0 | → 0 |
| Codex Skills | 0 | 0 | → 0 |
| SkillHub 安装 | 0 | 0 | → 0 |
| 近90天已使用 | 35 | 38 | ↑ +3 |
| 近90天未使用 | 88 | 91 | ↑ +3 |
| 分类 | Skill | 说明 |
|---|---|---|
| devops | automation-reliability | 自动化可靠性诊断 |
| devops | hermes-dashboard-ops | Hermes Dashboard 运维管理 |
| devops | hermes-server-management | Hermes 服务器管理 |
| devops | session-discipline | 会话纪律管理 |
| devops | skill-inventory-cleanup | 技能清单清理工具 |
| software-development | recommendation-risk-assessment | 推荐风险评估 |
| 类型 | 名称 | 说明 |
|---|---|---|
| MCP | codegraph | 已从 MCP 配置移除（v1.0.0 禁用状态），但 codebase-memory MCP 仍在运行（v0.9.0）。两者功能存在重叠（代码知识图谱），此举属合理精简。 |
基于使用频率、Snyk 安全扫描、功能重叠分析
curl | bash 从腾讯 COS 个人桶下载安装脚本，属于高危远程代码执行向量。建议立即移除或迁移至可信源。curl | bash 远程执行模式。存在凭证窃取和供应链攻击风险。codebase-memory (v0.9.0) 功能重叠（代码知识图谱 → 搜索/索引）。建议二选一：要么彻底卸载 codegraph 释放资源，要么升级到 v1.5.0 并对比两者后保留更优方案。
autonomous-ai-agents 分类下有 3 个类似功能的 skill：claude-code、codex、opencode，均为"委托编码任务给外部 CLI agent"。三者近 40 天未使用，若无需切换可精简为 1 个通用委托 skill。
hermes-ops 统一入口，减少分类膨胀。
引用 Snyk Agent Scan v0.5.15 (2026-07-29) 结果
[E005] Suspicious download URL (risk: 1.00) — 引导用户从腾讯 COS 个人桶执行 curl | bash:
https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh
[W012] Potentially malicious external URL (risk: 1.00) — Skill 安装流程包含运行时下载执行远程 shell 脚本。
影响: 供应链攻击 + 远程代码执行。建议立即移除该 skill 或替换 install.sh 为可信源。
[E005] Suspicious download URLs (risk: 0.70) — 包含多个 GitHub raw 安装脚本 curl|bash.
[E006] Malicious code pattern (risk: 0.90) — 引导用户将浏览器 Cookie/凭证粘贴并持久化到本地文件，再通过远程脚本执行。
[W012] External URLs with runtime commands (risk: 0.90) — xurl, xiaohongshu-mcp, rdt-cli 等多个第三方工具通过远程脚本安装。
影响: 凭证窃取 + 供应链攻击 + 数据泄露。建议审查所有引用的外部安装脚本，改用包管理器安装。
审计日志 /home/ftpuser/skillhub-install-audit.log 为空，本周无 SkillHub 来源的新安装记录。当前 SkillHub 安装计数为 0。
状态: ✅ 无异常。
| 分类 | Skills |
|---|---|
| autonomous-ai-agents | claude-code, codex, hermes-agent, opencode |
| computer-use | /home/agentuser/.hermes/skills/computer-use |
| creative | architecture-diagram, ascii-art, ascii-video, baoyu-comic, baoyu-infographic, claude-design, comfyui, creative-ideation, design-md, excalidraw, html-anything, humanizer, manim-video, p5js, pixel-art, popular-web-designs, pretext, sketch, songwriting-and-ai-music, touchdesigner-mcp |
| data-science | jupyter-live-kernel |
| devops | automation-diagnostics, automation-reliability, credential-testing-pitfall, disk-space-management, file-transfer-troubleshooting, hermes-config-debug, hermes-connection-rescue, hermes-custom-provider, hermes-dashboard-ops, hermes-plugin-install, hermes-profile-isolation, hermes-server-management, hermes-upgrade, install-dev-cli-tools, install-proxy-on-gfw-server, kanban-orchestrator, kanban-worker, memory-cleanup, p2p-file-transfer, repomix, session-discipline, skill-inventory-cleanup, tailscale-network-bridge, vsftpd-setup, webhook-subscriptions |
| dogfood | /home/agentuser/.hermes/skills/dogfood |
| github | codebase-inspection, github-auth, github-code-review, github-discovery, github-issues, github-pr-workflow, github-repo-management, github-repo-troubleshooting |
| hermes-public-access | /home/agentuser/.hermes/skills/hermes-public-access |
| leisure | find-nearby |
| mcp | mcp-closedresource-error, mcporter, native-mcp |
| media | bilibili-cookie-download, bilibili-video-download, gif-search, heartmula, songsee, spotify, youtube-content |
| mlops | google-gemini-provider, huggingface-hub |
| note-taking | obsidian |
| productivity | airtable, google-workspace, handle-cloud-storage-file-access, handle-file-sharing-and-network-issues, linear, maps, nano-pdf, notion, ocr-and-documents, petdex, powerpoint, quark-cloud-drive-access, regional-account-management, session-logging, teams-meeting-pipeline |
| research | agent-ecosystem-scan, arxiv, blogwatcher, llm-wiki, polymarket, research-paper-writing |
| security | security-and-hardening, server-security-hardening, snyk-scan-before-install |
| social-media | xitter, xurl |
| software-development | api-and-interface-design, ast-refactor, code-simplification, context-engineering, debugging-hermes-tui-commands, desktop-to-cloud-agent, doubt-driven-development, game-design-docs, gdd-html-editing, hermes-agent-skill-authoring, hermes-skill-gym, incremental-implementation, merge-external-skills, node-inspect-debugger, performance-optimization, plan, python-debugpy, recommendation-risk-assessment, requesting-code-review, simplify-code, source-driven-development, spike, subagent-driven-development, systematic-debugging, test-driven-development, writing-plans |
| yuanbao | /home/agentuser/.hermes/skills/yuanbao |
| 名称 | 状态 | 说明 |
|---|---|---|
| playwright | ● 运行中 | npx -y @dinesh-n |
| postgres | ● 运行中 | npx -y @marcelo-ochoa/server-postgres |
| docker | ● 运行中 | npx -y @paretools/docker |
| mysql | ● 运行中 | npx @marcelo-ochoa/server-mysql |
| headroom | ● 损坏 | v0.32.1 → v0.33.0 可更新 (缺少 fastapi) |
| claude-mem | ● 运行中 | /home/agentuser/.local/headroom/bin/claude-mem |
| codebase-memory | ● 运行中 | v0.9.0 (最新) |
| codegraph | ○ 已移除 | v1.0.0 → v1.5.0 (MCP 已禁用) |
| 来源 | 路径 | Skills |
|---|---|---|
| .agents | /home/agentuser/.agents/skills/ | agent-reach, find-skill-skillhub |
暂无 SkillHub 安装记录 · 审计日志为空
基于 session DB 中 skill_view 调用记录。仅反映 Hermes 内使用，不包含外部 Agent。
已使用: 38 · 未使用: 91 · 总计: 124 · 使用率: 25.5%
airtable, api-and-interface-design, architecture-diagram, arxiv, ascii-art, ascii-video, ast-refactor, automation-diagnostics, automation-reliability, baoyu-comic, baoyu-infographic, bilibili-cookie-download, bilibili-video-download, blogwatcher, claude-design, code-simplification, codebase-inspection, context-engineering, creative-ideation, debugging-hermes-tui-commands, design-md, desktop-to-cloud-agent, doubt-driven-development, excalidraw, file-transfer-troubleshooting, find-nearby, gif-search, github-auth, github-code-review, github-issues, github-pr-workflow, github-repo-management, github-repo-troubleshooting, google-workspace, handle-cloud-storage-file-access, handle-file-sharing-and-network-issues, heartmula, hermes-dashboard-ops, hermes-server-management, huggingface-hub, humanizer, incremental-implementation, install-dev-cli-tools, install-proxy-on-gfw-server, jupyter-live-kernel, kanban-orchestrator, kanban-worker, linear, llm-wiki, manim-video, maps, mcporter, nano-pdf, node-inspect-debugger, notion, obsidian, ocr-and-documents, opencode, p2p-file-transfer, p5js, performance-optimization, petdex, pixel-art, plan, polymarket, popular-web-designs, powerpoint, pretext, python-debugpy, quark-cloud-drive-access, recommendation-risk-assessment, regional-account-management, repomix, requesting-code-review, research-paper-writing, sketch, skill-inventory-cleanup, songsee, songwriting-and-ai-music, spike
... 还有 11 个
| Skill | 最后使用 |
|---|---|
| hermes-agent | 2026-07-29 (2d前) |
| session-discipline | 2026-07-29 (2d前) |
| mcp-closedresource-error | 2026-07-29 (2d前) |
| native-mcp | 2026-07-29 (2d前) |
| agent-ecosystem-scan | 2026-07-25 (5d前) |
| find-skill-skillhub | 2026-07-25 (5d前) |
| github-discovery | 2026-07-13 (18d前) |
| hermes-profile-isolation | 2026-07-11 (20d前) |
| agent-reach | 2026-07-11 (20d前) |
| hermes-custom-provider | 2026-07-10 (21d前) |
| hermes-config-debug | 2026-07-10 (21d前) |
| disk-space-management | 2026-07-07 (23d前) |
| hermes-agent-skill-authoring | 2026-07-05 (26d前) |
| hermes-connection-rescue | 2026-07-05 (26d前) |
| server-security-hardening | 2026-07-05 (26d前) |
| snyk-scan-before-install | 2026-07-05 (26d前) |
| xitter | 2026-07-04 (26d前) |
| xurl | 2026-07-04 (26d前) |
| security-and-hardening | 2026-06-29 (31d前) |
| hermes-upgrade | 2026-06-29 (31d前) |
| hermes-plugin-install | 2026-06-29 (31d前) |
| merge-external-skills | 2026-06-29 (31d前) |
| source-driven-development | 2026-06-29 (31d前) |
| session-logging | 2026-06-28 (32d前) |
| credential-testing-pitfall | 2026-06-28 (33d前) |
| memory-cleanup | 2026-06-28 (33d前) |
| google-gemini-provider | 2026-06-28 (33d前) |
| comfyui | 2026-06-24 (37d前) |
| game-design-docs | 2026-06-24 (37d前) |
| hermes-skill-gym | 2026-06-24 (37d前) |
| claude-code | 2026-06-24 (37d前) |
| codex | 2026-06-24 (37d前) |
| dogfood | 2026-06-22 (39d前) |
| hermes-public-access | 2026-06-22 (39d前) |
| yuanbao | 2026-06-22 (39d前) |
| gdd-html-editing | 2026-06-22 (39d前) |
| simplify-code | 2026-06-22 (39d前) |
| html-anything | 2026-06-21 (40d前) |