Agent skill · Audited from source

Eslint Fix

skill · laolaoshiren/claude-code-skills-zhMIT licenceAudited 19 Oct 2026 · source 7d69626375c6

★ 894pushed today
✓SAFEGrade B · 89/100 · 19 Oct 2026 · 7d69626
894repo stars · whole laolaoshiren/claude-code-skills-zh

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 7d69626375c6 and found no filesystem, network or shell access and no hard-coded secrets. What it does: 安全诊断并修复 ESLint error、warning 和配置兼容问题。用于用户要求运行 lint、解释 ESLint 报错、限定范围自动修复或迁移 ESLint 配置时;优先使用项目锁定的包管理器与版本,先预检再修改,不自动下载最新版或批量改写无关源码。

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Eslint Fix (laolaoshiren/claude-code-skills-zh)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/laolaoshiren/eslint-fix

Trust audit

Audit 0.4.1 · source read 19 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium0 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (0)

No findings at any severity. We re-audit when the source changes.

Audit 0.4.1 · source sha 7d69626375c6 · 19 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherlaolaoshiren GitHub userOwner of the repository this skill is read from
  • Source folderlaolaoshiren/claude-code-skills-zh/skills/eslint-fixThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict7d69626375c6A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: 安全诊断并修复 ESLint error、warning 和配置兼容问题。用于用户要求运行 lint、解释 ESLint 报错、限定范围自动修复或迁移 ESLint 配置时;优先使用项目锁定的包管理器与版本,先预检再修改,不自动下载最新版或批量改写无关源码。

---
name: eslint-fix
description: 安全诊断并修复 ESLint error、warning 和配置兼容问题。用于用户要求运行 lint、解释 ESLint 报错、限定范围自动修复或迁移 ESLint 配置时;优先使用项目锁定的包管理器与版本,先预检再修改,不自动下载最新版或批量改写无关源码。
---

# ESLint 修复助手

## 工作流程

### 1. 识别项目工具链

读取:

- `package.json` 中的 scripts、`devDependencies` 和 `packageManager`。
- npm、pnpm、Yarn 或 Bun 的 lockfile。
- `eslint.config.*`、`.eslintrc.*`、`.eslintignore`、Prettier 和 TypeScript 配置。
- 适用的仓库规则、Git 状态和用户指定的文件范围。

优先运行仓库已有的 lint script。只有确认 ESLint 已被当前项目锁定并安装时,才使用对应包管理器的本地执行方式。若缺失依赖,先报告;安装包、更新 lockfile 或迁移配置需要单独授权。

### 2. 建立只读基线

先对用户指定或本轮相关范围运行不修改文件的检查,记录:

- 实际命令、ESLint 版本和退出状态。
- error / warning 数量、涉及文件和规则。
- 基线中已有的问题与本轮引入的问题。

不要默认扫描整个大型仓库,也不要用未锁定依赖、可能联网下载新版本的 `npx` 调用。

### 3. 预览可修复范围

- 使用项目现有命令支持的 `--fix-dry-run`、JSON 输出或等价能力判断预计改动。
- 检查当前 Git diff,确认目标文件没有与用户修改重叠。
- 区分可自动修复、需要理解代码语义、需要配置决策三类问题。
- 展示预计修改范围;可能产生大面积格式 diff 或改变逻辑时先取得确认。

### 4. 限定范围修复

- 只对已确认的文件执行 `--fix`,不自动扩大到整个仓库。
- 对 `no-explicit-any`、未处理 Promise、React Hooks 依赖等语义规则,结合类型、调用方和运行路径修改,不能机械替换。
- 不为消除报错而默认禁用规则、加入全局 ignore、修改 formatter 顺序或降低严重级别。
- Prettier 与 ESLint 的执行顺序以项目现有 scripts 和集成配置为准。

常见可自动修复规则包括 `semi`、`quotes`、`indent`、`no-trailing-spaces`、`comma-dangle`、`arrow-parens` 和 `prefer-const`;dry-run 和 diff 只能预览改动,最终仍需按风险运行类型检查、测试或构建。

### 5. 复验

实际修改后:

1. 重新运行目标范围 lint。
2. 按改动风险运行类型检查、相关测试或构建。
3. 查看 Git diff,确认没有 lockfile、生成物或无关格式变化。
4. 记录未解决规则、原因和建议下一步。

## 安全边界

- 未经明确授权,不安装或升级依赖,不修改 lockfile、ESLint 配置、Prettier 配置或项目脚本。
- 不覆盖工作树中已有修改;目标文件存在重叠时先报告。
- 不声称“已修复”或“可编译”,除非对应命令真实运行并成功。
- Windows 与 Linux 都优先使用项目已有 scripts 和路径,不硬编码 shell 专属命令。

## 输出

```markdown
## ESLint 检查结果

- 范围:
- ESLint / 包管理器版本:
- 基线:X error,Y warning
- 实际命令与退出状态:

## 修改

| 文件 | 规则 | 处理方式 |
|------|------|----------|

## 复验

- lint:
- 类型检查 / 测试 / 构建:
- 未解决问题与原因:
```

Excerpt, first 1,741 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 7d69626

Download folder ↗
git clone https://github.com/laolaoshiren/claude-code-skills-zh
git -C claude-code-skills-zh checkout 7d69626375c6

The author documents no install command, so this uses the repository directly. Our verdict covers commit 7d69626375c6 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 7d69626375c6

Questions about Eslint Fix

What does the Eslint Fix skill do?
面向中文开发者的 Claude Code Skills / Agents / Plugins 精选与原创技能库|按场景分类|复制即装|持续更新
Is Eslint Fix safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Eslint Fix access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (7d69626375c6), read on 2026-10-19. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.