Security Audit
TheDecipherist/claude-code-mastery
Checks a codebase for hardcoded secrets, vulnerable dependencies, weak input handling, weak authentication and unsafe transport settings before deployment or merge.
TencentOS Server 全栈运维诊断，根据用户的自然语言描述，自动识别需要的能力接口，查询能力实现，使用具体能力解决客户问题。覆盖磁盘空间/分区/文件系统/LVM/健康检测、网络连通性/丢包/延迟排查、CPU火焰图/系统调用热点/调度延迟/中断均衡/文件IO延迟/进程IO追踪分析、内存泄漏/OOM诊断、系统日志/服务管理/时间同步/软件包/软件源管理、kdump配置与故障排查、等保三级…
Install Tencentos Expert
$ npx skills add infometa/workbuddyskills --skill tencentos-expert -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install infometa/workbuddyskills tencentos-expert --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/infometa/workbuddyskills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/tencentos-expert .claude/skills/tencentos-expert && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "tencentos-expert" agent skill from https://github.com/infometa/workbuddyskills/tree/main/skills/tencentos-expert into .claude/skills/tencentos-expert/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "tencentos-expert", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/infometa/workbuddyskills/tree/main/skills/tencentos-expertType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add infometa/workbuddyskills --skill tencentos-expert -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install infometa/workbuddyskills tencentos-expert --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/infometa/workbuddyskills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/tencentos-expert .agents/skills/tencentos-expert && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "tencentos-expert" agent skill from https://github.com/infometa/workbuddyskills/tree/main/skills/tencentos-expert into .agents/skills/tencentos-expert/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "tencentos-expert", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add infometa/workbuddyskills --skill tencentos-expert -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install infometa/workbuddyskills tencentos-expert --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/infometa/workbuddyskills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/tencentos-expert .cursor/skills/tencentos-expert && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "tencentos-expert" agent skill from https://github.com/infometa/workbuddyskills/tree/main/skills/tencentos-expert into .cursor/skills/tencentos-expert/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "tencentos-expert", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/infometa/workbuddyskills.git --path skills/tencentos-expert--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add infometa/workbuddyskills --skill tencentos-expert -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install infometa/workbuddyskills tencentos-expert --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/infometa/workbuddyskills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/tencentos-expert .gemini/skills/tencentos-expert && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "tencentos-expert" agent skill from https://github.com/infometa/workbuddyskills/tree/main/skills/tencentos-expert into .gemini/skills/tencentos-expert/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "tencentos-expert", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install infometa/workbuddyskills tencentos-expertInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add infometa/workbuddyskills --skill tencentos-expert -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/infometa/workbuddyskills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/tencentos-expert .github/skills/tencentos-expert && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "tencentos-expert" agent skill from https://github.com/infometa/workbuddyskills/tree/main/skills/tencentos-expert into .github/skills/tencentos-expert/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "tencentos-expert", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add infometa/workbuddyskills --skill tencentos-expert -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install infometa/workbuddyskills tencentos-expert --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/infometa/workbuddyskills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/tencentos-expert .opencode/skills/tencentos-expert && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "tencentos-expert" agent skill from https://github.com/infometa/workbuddyskills/tree/main/skills/tencentos-expert into .opencode/skills/tencentos-expert/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "tencentos-expert", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
tencentos-expert- GitHub stars
- 348
- Token cost
- ~3.2k tokens
- SKILL.md length
- 691 words
- Files
- 65 (incl. scripts, references)
- Skills in repo
- 218
- Repo updated
- First seen
- Licence
- None found
At a glance
TencentOS Server 全栈运维诊断，根据用户的自然语言描述，自动识别需要的能力接口，查询能力实现，使用具体能力解决客户问题。覆盖磁盘空间/分区/文件系统/LVM/健康检测、网络连通性/丢包/延迟排查、CPU火焰图/系统调用热点/调度延迟/中断均衡/文件IO延迟/进程IO追踪分析、内存泄漏/OOM诊断、系统日志/服务管理/时间同步/软件包/软件源管理、kdump配置与故障排查、等保三级…
- Works in 5 steps: 安装依赖工具（首次执行） → 理解用户意图 → 加载模块详细文档 → …
- Tasks that involve Vulnerability scanning
- SKILL.md covers 工作流程, 能力索引（24 项）, 文档路径映射（完整） and 场景快速导航（按问题现象路由）, plus 2 more sections
- Calls dnf and yum
What it does
Tencentos Expert is an agent skill from infometa/workbuddyskills. TencentOS Server 全栈运维诊断，根据用户的自然语言描述，自动识别需要的能力接口，查询能力实现，使用具体能力解决客户问题。覆盖磁盘空间/分区/文件系统/LVM/健康检测、网络连通性/丢包/延迟排查、CPU火焰图/系统调用热点/调度延迟/中断均衡/文件IO延迟/进程IO追踪分析、内存泄漏/OOM诊断、系统日志/服务管理/时间同步/软件包/软件源管理、kdump配置与故障排查、等保三级安全基线检查与加固、CVE漏洞查询、产品文档实时查询。共24项能力，渐进式按需加载。触发词：磁盘满、磁盘空间、分区、格式化、挂载、fstab、LVM、扩容、SMART、坏块、ping不通、端口不通、DNS、丢包、延迟、网络慢、RTT、火焰图、CPU热点、perf、系统调用、调度延迟、中断不均衡、软中断、文件IO慢、fsync慢、page…
Its SKILL.md is about 3.2k tokens, which your agent loads only when the skill is triggered. The skill folder holds 65 other files, including scripts and reference files (for example `references/common-instructions.md`, `references/cpu-flamegraph-examples.md` and `references/cpu-flamegraph-guide.md`).
It sits in Security, covering Vulnerability scanning. It works with npm. The repository describes itself as: WorkBuddy skills / connectors / experts archive for offline study.
When your agent uses it
- Tasks that involve Vulnerability scanning
Example prompts
- “Use the tencentos-expert skill to tencento Server 全栈运维诊断，根据用户的自然语言描述，自动识别需要的能力接口，查询能力实现，使用具体能力解决客户问题。覆盖磁盘空间/分区/文件系统/LVM/健康检测、网络连通性/丢包/延迟排查、CPU火焰图/系统调…”
- “/tencentos-expert”
Workflow steps
5 steps, taken from the step headings in SKILL.md.
- 安装依赖工具（首次执行）
- 理解用户意图
- 加载模块详细文档
- 执行诊断
- 输出结果
What it can do on your machine
Read from SKILL.md and the folder at commit 91b77ea. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/, which the agent can run.
Shell commands in SKILL.md call:
dnfyum
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Tencentos Expert loads about 3.2k tokens when it runs, and up to ~155k if it reads all its reference files. Until then it costs about 145 tokens; SKILL.md has 691 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 691 words (~3,241 tokens).
- name
- tencentos-expert
- description_zh
- TencentOS 服务器运维诊断助手，排查磁盘/网络/CPU/内存/安全问题
- description_en
- TencentOS Server ops assistant for disk, network, CPU, memory & security diagnostics
- version
- 2.0.1
Files
SKILL.md and 64 other files (scripts, references) in skills/tencentos-expert of infometa/workbuddyskills.
- SKILL.md
- references/common-instructions.md
- references/cpu-flamegraph-examples.md
- references/cpu-flamegraph-guide.md
- references/cpu-flamegraph-perf.md
- references/cpu-flamegraph.md
- references/disk-filesystem.md
- references/disk-health.md
- references/disk-lvm.md
- references/disk-partition.md
- references/disk-space.md
- references/file-io-trace.md
- references/flamegraph-install.md
- references/fs-latency.md
- references/irq-balance-examples.md
- references/irq-balance-guide.md
- references/irq-balance-perf.md
- references/irq-balance.md
- references/kdump-check.md
- references/memory-leak-guide.md
- … and 45 more
Open the folder on GitHubat commit 91b77ea
Compare with similar skills
Tencentos Expert next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Tencentos Expert this skillinfometa/workbuddyskills | 348 | — | ~3.2k | Automated safety check: Pass | None | |
| Security AuditTheDecipherist/claude-code-mastery | 551 | — | ~1.3k | Automated safety check: Notes | MIT | |
| Pre-Commit Security Scanzereight/gitlab-mcp | 2k | 1 repos | ~859 | Automated safety check: Notes | MIT | |
| Dependency Auditbriiirussell/cybersecurity-skills | 413 | — | ~3.2k | Automated safety check: Warn | MIT | |
| Dependency Checkruvnet/ruflo | 74k | — | ~258 | Automated safety check: Pass | MIT | |
| Scanning For Vulnerabilitiesjeremylongshore/tons-of-skills-marketplace | 2.8k | — | ~927 | Automated safety check: Pass | MIT |
Similar skills
Pre-Commit Security Scan
zereight/gitlab-mcp
Runs a fast security sweep of recent code changes before a commit or PR, checking for leaked secrets, vulnerable dependencies, unsafe input handling and auth gaps.
Dependency Audit
briiirussell/cybersecurity-skills
Audit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-patterns.
Dependency Check
ruvnet/ruflo
Scan project dependencies for known vulnerabilities and CVEs.
Scanning For Vulnerabilities
jeremylongshore/tons-of-skills-marketplace
Execute this skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin.
Evaluate Dependency
686f6c61/alfred-dev
Usar antes de aceptar una dependencia nueva. An agent skill from 686f6c61/alfred-dev.
More from infometa/workbuddyskills
All 218 skills in this repoCampus Event Playbook
infometa/workbuddyskills
This skill should be used when planning, coordinating, running, or reviewing student-led campus events, including club recruitment, freshman mixers, welcome activities, small talks, competitions…
Teachany
infometa/workbuddyskills
K-12 interactive courseware creation. An agent skill from infometa/workbuddyskills.
Weight Management HTML
infometa/workbuddyskills
A skill your agent uses when the adult weight-management MCP needs to be installed/set up in WorkBuddy (connector) or its result must be rendered as a standalone Chinese HTML plan.
Agent Browser
infometa/workbuddyskills
A skill your agent uses when the user needs browser automation, including opening web pages, taking screenshots, extracting page content, clicking elements, filling forms, or testing web flows.
AI Research Radar
infometa/workbuddyskills
定时任务：每日研究简报。漏掉重要论文和行业报告？每天帮你盯着，关键信息一条不漏 This skill should be used when the user asks about 定时任务：每日研究简报.
Check Deck
infometa/workbuddyskills
Investment banking presentation quality checker. An agent skill from infometa/workbuddyskills.
Related
Works with
Categories
Questions about Tencentos Expert
What does Tencentos Expert do?
TencentOS Server 全栈运维诊断，根据用户的自然语言描述，自动识别需要的能力接口，查询能力实现，使用具体能力解决客户问题。覆盖磁盘空间/分区/文件系统/LVM/健康检测、网络连通性/丢包/延迟排查、CPU火焰图/系统调用热点/调度延迟/中断均衡/文件IO延迟/进程IO追踪分析、内存泄漏/OOM诊断、系统日志/服务管理/时间同步/软件包/软件源管理、kdump配置与故障排查、等保三级…. Tencentos Expert is an agent skill from infometa/workbuddyskills.
When should I use Tencentos Expert?
Tencentos Expert fits situations like: tasks that involve Vulnerability scanning.
How do I install Tencentos Expert in Claude Code?
Run `npx skills add infometa/workbuddyskills --skill tencentos-expert -a claude-code`. Or copy the skill folder (skills/tencentos-expert in infometa/workbuddyskills) into .claude/skills/tencentos-expert in your project. Claude Code loads it when a task matches its description.
How do I install Tencentos Expert in Codex?
Run `npx skills add infometa/workbuddyskills --skill tencentos-expert -a codex`. Or copy the skill folder (skills/tencentos-expert in infometa/workbuddyskills) into .agents/skills/tencentos-expert in your project. Codex loads it when a task matches its description.
Can I use Tencentos Expert in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add infometa/workbuddyskills --skill tencentos-expert -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/tencentos-expert, .gemini/skills/tencentos-expert, .github/skills/tencentos-expert and .opencode/skills/tencentos-expert in your project.
What does Tencentos Expert need to run?
Going by SKILL.md and its folder, Tencentos Expert needs the command-line tools its instructions call (dnf and yum).
Does Tencentos Expert access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Tencentos Expert safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Tencentos Expert use?
No licence was found for Tencentos Expert or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does Tencentos Expert use?
About 3.2k tokens (SKILL.md is roughly 13k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 152k tokens, read only when the agent opens those files.
What are the alternatives to Tencentos Expert?
Skills that share tags, products or a category with Tencentos Expert: Security Audit (TheDecipherist/claude-code-mastery, 551 stars), Pre-Commit Security Scan (zereight/gitlab-mcp, 2k stars), Dependency Audit (briiirussell/cybersecurity-skills, 413 stars) and Dependency Check (ruvnet/ruflo, 74k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Tencentos Expert?
infometa (a GitHub user) maintains it in infometa/workbuddyskills, which has 348 GitHub stars. The repository holds 218 skills in this directory. The repository was last updated on October 9, 2026.
Source: infometa/workbuddyskills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.