Atlas / Skills / tencentblueking / Bk Monitor Tapd Dev

Bk Monitor Tapd DevSAFE

skills/tencentblueking/bk-monitor-tapd-dev

蓝鲸智云容器管理平台(BlueKing Container Service)

Verdict
SAFE
Grade
B
Trust score
89 /100
Version
—
Hosts
—
License
NOASSERTION
Stars
840
01

Overview

蓝鲸智云容器管理平台(BlueKing Container Service)

Read from source at commit 87a6fdb6f4b4OBSERVED · 2026-10-12
02

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: bk-monitor-tapd-dev
description: 根据 TAPD 单据分析开发需求并生成方案。当用户需要开发 TAPD 需求/缺陷/任务时使用。
---

# TAPD 单据开发助手

## 工作流程

### Step 1: 获取 TAPD ID 并验证分支(阻塞)

1. 获取 ID:用户提供或从分支名提取(`git branch --show-current`,匹配 `#(\d+)`)
2. 验证分支是否包含该 ID
   - 匹配 → 继续
   - 不匹配 → 询问用户选择(创建分支/继续开发)

### Step 2-3: 获取单据

1. 解析 workspace_id = id.substring(2, 10)
2. 调用 MCP(stories_get、bugs_get、tasks_get)获取单据详情和评论

### Step 4-6: 分析与开发

1. 分析需求(标题、描述、评论、截止日期)
2. 按 dev-plan-template.md 生成方案
3. 等待用户确认后开始开发

## 注意事项

- 分支验证是第一优先级
- 方案需用户确认才能开始开发
- 评论与描述冲突时以最新评论为准

---

## 📦 可用资源

- `skill://bk-monitor-tapd-dev/references/branch-workflow.md`
- `skill://bk-monitor-tapd-dev/references/dev-plan-template.md`
- `skill://bk-monitor-tapd-dev/references/mcp-calls.md`
- `skill://bk-monitor-tapd-dev/references/tapd-mcp-guide.md`


---
## 📦 可用资源

- `skill://bk-monitor-tapd-dev/references/branch-workflow.md`
- `skill://bk-monitor-tapd-dev/references/dev-plan-template.md`
- `skill://bk-monitor-tapd-dev/references/mcp-calls.md`
- `skill://bk-monitor-tapd-dev/references/tapd-mcp-guide.md`

> 根据 SKILL.md 中的 IF-THEN 规则判断是否需要加载
03

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (1)

MEDIUMInventory / provenance · inv.symlink · CWE-1104
.codebuddy
.codebuddy
Why it matters. link not followed

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha 87a6fdb6f4b4full audit observations/trust-audit/skill/tencentblueking__bk-monitor-tapd-dev.json · Report an issue / request a re-scan
04

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-1287a6fdb6f4b4SAFEB89first audit
05

Questions

What does the Bk Monitor Tapd Dev skill do?

蓝鲸智云容器管理平台(BlueKing Container Service)

Is Bk Monitor Tapd Dev safe to install?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.

What can Bk Monitor Tapd Dev access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

How current is this page?

The grade is for one exact copy of the source (87a6fdb6f4b4), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement