Bk Monitor Dev ServerSAFE
蓝鲸智云容器管理平台(BlueKing Container Service)
Overview
蓝鲸智云容器管理平台(BlueKing Container Service)
87a6fdb6f4b4OBSERVED · 2026-10-12Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| cursor | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: bk-monitor-dev-server description: 帮助配置和启动本地开发服务器。当用户提到启动开发服务器、dev server、pnpm dev 时使用。 --- # 本地开发服务器配置 ## 工作流程 ### Step 0: 检查配置(优先) ```bash node .cursor/skills/dev-server/scripts/setup-config.js ``` - `CONFIG_VALID` → 跳到 Step 5 - `CONFIG_INVALID:*` → 需配置,向用户索要 URL/Cookie/Token ### Step 1-4: 环境配置 1. 环境检查:`bash .cursor/skills/dev-server/scripts/check-env.sh` 2. 安装依赖:`pnpm i` 3. 生成配置(详见 config-guide.md) 4. 配置 hosts ### Step 5: 启动服务 - monitor-pc: `make dev-pc` - trace (Vue3): `make dev-vue3` ### Step 6: 验证 等待 `Compiled successfully`,访问 `http://appdev.xxx.com:7001` --- ## 常见问题速查 | 问题 | 可能原因 | 解决方案 | | ------------- | ----------------- | ------------------------------ | | 端口被占用 | 其他进程占用 7001 | 服务会自动换端口 | | API 401/403 | Cookie/Token 过期 | 重新获取 Cookie 和 X-CSRFToken | | API 连接失败 | 代理配置错误 | 检查 devProxyUrl | | 页面空白 | hosts 未配置 | 添加 hosts 映射 | | 依赖安装失败 | 未使用 pnpm | 使用 `pnpm i` | 详细排查见 [references/troubleshooting.md](references/troubleshooting.md) --- ## 📦 可用资源 - `skill://bk-monitor-dev-server/references/config-guide.md` - `skill://bk-monitor-dev-server/references/troubleshooting.md` - `skill://bk-monitor-dev-server/scripts/check-env.sh` - `skill://bk-monitor-dev-server/scripts/setup-config.js` --- ## 📦 可用资源 - `skill://bk-monitor-dev-server/scripts/check-env.sh` - `skill://bk-monitor-dev-server/scripts/generate-config.js` - `skill://bk-monitor-dev-server/scripts/setup-config.js` - `skill://bk-monitor-dev-server/references/config-guide.md` - `skill://bk-monitor-dev-server/references/troubleshooting.md` > 根据 SKILL.md 中的 IF-THEN 规则判断是否需要加载
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (1)
.codebuddy
Gates applied: no_behavioural_pass.
87a6fdb6f4b4full audit observations/trust-audit/skill/tencentblueking__bk-monitor-dev-server.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 87a6fdb6f4b4 | SAFE | B | 89 | first audit |
Questions
What does the Bk Monitor Dev Server skill do?
蓝鲸智云容器管理平台(BlueKing Container Service)
Is Bk Monitor Dev Server safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Bk Monitor Dev Server access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Bk Monitor Dev Server work with?
Its documentation mentions cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (87a6fdb6f4b4), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.