MCP Server Builder
anthropics/skills
Guides the design and implementation of Model Context Protocol servers in TypeScript or Python, from tool naming and error messages to evaluation.
闲鱼风控/合规预检 skill。何时激活:用户要发商品、回消息、降价改标前让你 "看看这样行不行"、"会不会违规"、"会不会封号"、"会不会限流";或用户说 "被限流了/曝光掉了怎么办";或被 goofish-publish-item / goofish-reply-buyer 调用做预检。功能:发布前扫描(绝对化词、类目偏差、降价改标、9 图合规), 发送前扫描(外联词、误导承诺),触发…
$ npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install fancyboi999/goofish-cli goofish-risk-guard --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/fancyboi999/goofish-cli.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/goofish-risk-guard .claude/skills/goofish-risk-guard && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "goofish-risk-guard" agent skill from https://github.com/fancyboi999/goofish-cli/tree/main/skills/goofish-risk-guard into .claude/skills/goofish-risk-guard/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "goofish-risk-guard", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/fancyboi999/goofish-cli/tree/main/skills/goofish-risk-guardType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install fancyboi999/goofish-cli goofish-risk-guard --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/fancyboi999/goofish-cli.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/goofish-risk-guard .agents/skills/goofish-risk-guard && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "goofish-risk-guard" agent skill from https://github.com/fancyboi999/goofish-cli/tree/main/skills/goofish-risk-guard into .agents/skills/goofish-risk-guard/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "goofish-risk-guard", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install fancyboi999/goofish-cli goofish-risk-guard --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/fancyboi999/goofish-cli.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/goofish-risk-guard .cursor/skills/goofish-risk-guard && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "goofish-risk-guard" agent skill from https://github.com/fancyboi999/goofish-cli/tree/main/skills/goofish-risk-guard into .cursor/skills/goofish-risk-guard/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "goofish-risk-guard", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/fancyboi999/goofish-cli.git --path skills/goofish-risk-guard--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install fancyboi999/goofish-cli goofish-risk-guard --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/fancyboi999/goofish-cli.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/goofish-risk-guard .gemini/skills/goofish-risk-guard && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "goofish-risk-guard" agent skill from https://github.com/fancyboi999/goofish-cli/tree/main/skills/goofish-risk-guard into .gemini/skills/goofish-risk-guard/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "goofish-risk-guard", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install fancyboi999/goofish-cli goofish-risk-guardInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/fancyboi999/goofish-cli.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/goofish-risk-guard .github/skills/goofish-risk-guard && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "goofish-risk-guard" agent skill from https://github.com/fancyboi999/goofish-cli/tree/main/skills/goofish-risk-guard into .github/skills/goofish-risk-guard/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "goofish-risk-guard", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install fancyboi999/goofish-cli goofish-risk-guard --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/fancyboi999/goofish-cli.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/goofish-risk-guard .opencode/skills/goofish-risk-guard && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "goofish-risk-guard" agent skill from https://github.com/fancyboi999/goofish-cli/tree/main/skills/goofish-risk-guard into .opencode/skills/goofish-risk-guard/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "goofish-risk-guard", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
goofish-risk-guard闲鱼风控/合规预检 skill。何时激活:用户要发商品、回消息、降价改标前让你 "看看这样行不行"、"会不会违规"、"会不会封号"、"会不会限流";或用户说 "被限流了/曝光掉了怎么办";或被 goofish-publish-item / goofish-reply-buyer 调用做预检。功能:发布前扫描(绝对化词、类目偏差、降价改标、9 图合规), 发送前扫描(外联词、误导承诺),触发…
Goofish Risk Guard is an agent skill from fancyboi999/goofish-cli. 闲鱼风控/合规预检 skill。何时激活:用户要发商品、回消息、降价改标前让你 "看看这样行不行"、"会不会违规"、"会不会封号"、"会不会限流";或用户说 "被限流了/曝光掉了怎么办";或被 goofish-publish-item / goofish-reply-buyer 调用做预检。功能:发布前扫描(绝对化词、类目偏差、降价改标、9 图合规), 发送前扫描(外联词、误导承诺),触发 RGV587 风控后的恢复指引。 本 skill 主要是知识库 + 检查清单,不直接替用户改文案——由调用方 skill 拿检查结果去改。
Its SKILL.md is about 730 tokens, which your agent loads only when the skill is triggered. The skill folder holds 5 other files, including reference files (for example `references/external-contact-keywords.md`, `references/forbidden-words.md` and `references/publish-red-lines.md`).
It works with Model Context Protocol. The repository describes itself as: 闲鱼 CLI · 原生支持 MCP · 为 AI Agent 而生 | Goofish (Xianyu) automation CLI · MCP-ready · Built for AI Agents. The licence is Apache-2.0.
4 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit c2b397f. It shows what the files ask for, not the result of running them.
Pre-approves these tools, so the agent can use them without asking each time:
mcp__goofish__auth_statusmcp__goofish__search_itemsmcp__goofish__item_getmcp__goofish__auth_reset_guardFrom allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Goofish Risk Guard loads about 727 tokens when it runs, and up to ~4.8k if it reads all its reference files. Until then it costs about 73 tokens; SKILL.md has 207 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from fancyboi999/goofish-cli at commit c2b397f, republished under its Apache-2.0 licence (© fancyboi999). 207 words, ~727 tokens.
.claude/skills/goofish-risk-guard/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.正文使用 auth_status 这类逻辑名。OpenClaw 调 goofish__<逻辑名>;
Claude Code / Cursor 调 mcp__goofish__<逻辑名>。frontmatter 的 allowed-tools
保留 Claude 权限预批准格式,OpenClaw 不读取该字段。
这是 被其它 skill 频繁调用的知识库型 skill。Agent 读它的 references,不一定要调 MCP 工具。
其它 skill 什么时候应该引用本 skill:
| 上游 skill | 引用点 |
|---|---|
goofish-publish-item | 标题/描述生成后、发布前 → forbidden-words.md + publish-red-lines.md |
goofish-reply-buyer | 起草回复后、send 前 → external-contact-keywords.md |
goofish-shop-diagnosis | 归因分析阶段 → publish-red-lines.md 里的降权触发项 |
输入:标题 / 描述 / 价格 / 图片数 / 类目 / 历史价格(若有)
输出:{ blockers: [...], warnings: [...], suggestions: [...] }
blockers(必须改,否则拒绝发布):
forbidden-words.md)warnings(建议改):
suggestions(可选优化):
具体规则见 references/publish-red-lines.md。
输入:草稿 text
输出:{ block: bool, reason: str, replacement: str | None }
命中规则(详见 references/external-contact-keywords.md):
block=True,提供合规替换block=Truewarningwarning当 MCP 调用返回 FAIL_SYS_ILLEGAL_ACCESS 或 RGV587:
不要做:
auth_login(覆盖 cookie 后丢失 x5sec,更糟)auth reset-guard(只解本地熔断,不解服务端)要做(按顺序):
x5sec / mtop_partitioned_detect cookie 下发goofish auth login --browser chrome 重新导入(带 x5sec)详见 references/x5sec-recovery.md。
这些请求 拒绝并解释,不要找绕过路径:
| 用户请求 | 为什么拒 |
|---|---|
| "帮我写个微信号的隐藏方式" / "帮我躲过外联词检测" | 违反平台规则 + 本工具合规声明红线 |
| "帮我刷单/做假交易" | 同上 |
| "帮我批量注册小号" / "帮我伪造设备 ID" | 同上 |
| "帮我把这个假货说成真的" | 欺诈 |
| "帮我写差评报复别的卖家" | 恶意 |
| "帮我规避封号后的账号找回" | 绕过平台风控 |
话术模板:
这个请求踩到了闲鱼平台的合规红线({具体项}),本工具不协助这类操作。你可以考虑 {合规替代方案}。
大部分检查不需要调 MCP 工具——读 references 就够。需要时:
search_items:查买家视角能否搜到自家商品(诊断限流)item_get:拉自家商品历史元数据(判断是否降价改标了)auth_status:调其它工具前确认登录态写操作本 skill 完全不调(item_publish / media_upload / message_send / item_delete 都不在 allowed-tools)。
© fancyboi999, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 4 other files (references) in skills/goofish-risk-guard of fancyboi999/goofish-cli.
Open the folder on GitHubat commit c2b397f
Goofish Risk Guard next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Goofish Risk Guard this skillfancyboi999/goofish-cli | 309 | — | ~727 | Automated safety check: Pass | Apache-2.0 | |
| MCP Server Builderanthropics/skills | 180k | 63 repos | ~2.3k | Automated safety check: Pass | Apache-2.0 | |
| MCP Server BuildershareAI-lab/learn-claude-code | 78k | 4 repos | ~1.2k | Automated safety check: Pass | MIT | |
| MCP Integration for Pluginsanthropics/claude-plugins-official | 38k | 11 repos | ~3.1k | Automated safety check: Pass | Apache-2.0 | |
| Figma use_figma Plugin API Ruleswarpdotdev/warp | 65k | 4 repos | ~4.4k | Automated safety check: Pass | AGPL-3.0 | |
| Stitch to Remotion Walkthrough Videosgoogle-labs-code/stitch-skills | 8.5k | 6 repos | ~3.2k | Automated safety check: Notes | Apache-2.0 |
anthropics/skills
Guides the design and implementation of Model Context Protocol servers in TypeScript or Python, from tool naming and error messages to evaluation.
shareAI-lab/learn-claude-code
Walks through building MCP servers in Python or TypeScript that expose tools, resources and prompts to Claude, with templates, registration and testing.
anthropics/claude-plugins-official
Explains how to bundle Model Context Protocol servers in a Claude Code plugin, covering config files, stdio, SSE, HTTP and WebSocket server types, and authentication.
warpdotdev/warp
Required groundwork before any use_figma call: the rules and reference files for running JavaScript in a Figma file through the Plugin API without common failures.
google-labs-code/stitch-skills
Builds walkthrough videos from Stitch design projects using Remotion, with transitions, zoom effects and text overlays on each screen.
coollabsio/coolify
A skill your agent uses for Laravel MCP development. An agent skill from coollabsio/coolify.
fancyboi999/goofish-cli
闲鱼发商品 skill。何时激活:用户说"帮我发到闲鱼 / 挂个闲置 / 把 XX 上架 / 发布一件 / 新增商品 / 上新";或说"这个怎么写标题 / 类目该选啥 / 图片够了吗"。
fancyboi999/goofish-cli
闲鱼买家消息回复 skill。何时激活:用户说"看看我有没有未读 / 回复下买家 / 有人问 XX 怎么办 / 他要砍价我怎么办 / 帮我回一下消息 / 处理下催付 / 议价策略"。
fancyboi999/goofish-cli
闲鱼店铺 / 商品诊断 skill。何时激活:用户说"我店铺没流量 / 曝光掉了 / 怎么没人问 / 是不是被限流 / 帮我看看为啥没单 / 哪里出问题了"。功能: 用 searchitems 做"买家视角"查自家商品是否露出 → itemview 拉详情 对比排查 → 按归因清单给出"限流可能性 + 修复建议"。本 skill 纯读, 不做任何写操作——只诊断不修,修留给…
fancyboi999/goofish-cli
闲鱼(goofish.com)自动化运营的总入口 skill。何时激活:用户首次提到 闲鱼 / 咸鱼 / goofish / 二手交易 / 挂闲置 / 回买家消息 / 发商品到闲鱼, 或用户询问本工具如何使用、有哪些能力、能做什么。本 skill 介绍 goofish-cli 的定位、账号模型、17 个 MCP 工具速查、风控底线,并指向其它专项 skill…
Works with
闲鱼风控/合规预检 skill。何时激活:用户要发商品、回消息、降价改标前让你 "看看这样行不行"、"会不会违规"、"会不会封号"、"会不会限流";或用户说 "被限流了/曝光掉了怎么办";或被 goofish-publish-item / goofish-reply-buyer 调用做预检。功能:发布前扫描(绝对化词、类目偏差、降价改标、9 图合规), 发送前扫描(外联词、误导承诺),触发…. Goofish Risk Guard is an agent skill from fancyboi999/goofish-cli.
Run `npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a claude-code`. Or copy the skill folder (skills/goofish-risk-guard in fancyboi999/goofish-cli) into .claude/skills/goofish-risk-guard in your project. Claude Code loads it when a task matches its description.
Run `npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a codex`. Or copy the skill folder (skills/goofish-risk-guard in fancyboi999/goofish-cli) into .agents/skills/goofish-risk-guard in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add fancyboi999/goofish-cli --skill goofish-risk-guard -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/goofish-risk-guard, .gemini/skills/goofish-risk-guard, .github/skills/goofish-risk-guard and .opencode/skills/goofish-risk-guard in your project.
SKILL.md names no scripts, command-line tools or credentials: Goofish Risk Guard is instructions for the agent only. Its frontmatter pre-approves these tools: mcp__goofish__auth_status, mcp__goofish__search_items, mcp__goofish__item_get, mcp__goofish__auth_reset_guard.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Goofish Risk Guard is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 727 tokens (SKILL.md is roughly 2.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 4k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Goofish Risk Guard: MCP Server Builder (anthropics/skills, 180k stars), MCP Server Builder (shareAI-lab/learn-claude-code, 78k stars), MCP Integration for Plugins (anthropics/claude-plugins-official, 38k stars) and Figma use_figma Plugin API Rules (warpdotdev/warp, 65k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
fancyboi999 (a GitHub user) maintains it in fancyboi999/goofish-cli, which has 309 GitHub stars. The repository holds 5 skills in this directory. The repository was last updated on October 10, 2026.
Source: fancyboi999/goofish-cli on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.