LLM Mart Basic

用于撰写、重写或审计作品的内容简介。简介即开篇——读者看简介的决策模式与看开头完全一致：在 3–5 秒内决定要不要点开。适合把题材卖点、主角处境、核心冲突、持续承诺与情绪抓手压缩成平台可用文本，支持全层级（全书/分部/分卷/章节）简介。关键词：内容简介、作品简介、平台简介、卖点压缩、简介重写、简介审计、简介同构。

用于润色已有章节正文。适合整章精修、局部重写、节奏提纯、章首抓力增强、中段回报提亮与章末钩子收紧。关键词：润这章、精修正文、整章精修、局部重写、节奏提纯、直接回写。

润色章节后的 `## 作者有话说`。用于把作者有话说修成读者向小剧场：一丢丢创作花絮 + 一点贴着本章余波的情绪共鸣 + 一个开放式轻追问，而不是创作说明会、设定讲义或章节总结。适合发布前精修、后记前小剧场重写、把作者有话说从复盘腔改回读者腔。

专用于小说写作的结构化深度研究 Skill。支持对题材趋势、平台生态、专业知识、场景环境、人物原型、写作技法、读者市场等研究域，执行大纲生成→并行深搜→报告输出的全流程深度调研。关键词：深度研究、写作研究、题材调研。

用于生成写前章节控制卡、章节施工卡或章节作战卡。适合写前施工、场景拆分、中段回报预埋、章末钩子预埋与上游供血对齐。关键词：章节控制卡、施工卡、作战卡、中段回报、章末钩子、写前施工。

用于对单章或连续多章执行"初始化→控制卡→创作→润色→去AI味→审阅回炉→读者产物→摘要"的完整章节闭环。适合章节写作 SOP、批量写章、日志续跑、9.2+ 回炉与最终摘要收口。关键词：章节创作闭环、跑完整 SOP、批量写章、回炉到 9.2、日志续跑、最终摘要。

用于管理章节与卷层的连续性、冷热线、动态状态与回归压力。适合写前判断该回什么、写后更新动态状态、检查中段失温与追踪章节链路热度。关键词：连续性、冷热线、谁该回来了、哪些线快忘了、动态状态、失温检查。

用于蒸馏一部成功小说的叙事架构 DNA、故事线台账、套路指纹与读者吸引留存策略，产出可被下游写/审/改 Skill 消费的"作品蓝本模板"。蒸馏优先级：书名策略 > 内容简介 > 黄金三章 > 章标题/章首/章末模式 > 套路配置 > 故事线台账。适合把一部作品的"读者为何点开/为何追读"的核心回路提炼为可参照的结构约束。关键词：蒸馏作品蓝本、叙事架构DNA、故事线台账、读者吸引指纹、黄金三章拆解、书名策略、套路指纹、章标题策略、钩子指纹、交叉蒸馏。

用于蒸馏一位小说作者的文笔 DNA，产出可被下游写/审/改 Skill 消费的"作者风格模板"。适合把作者的多部作品的文笔特征提炼为可测量的风格约束（句长基线、段落节奏、感官偏好、对话标签偏好、比喻指纹、禁忌清单），并在目标项目根目录自动注册到 Agents.md。关键词：蒸馏作者文风、作者风格模板、文笔DNA、风格注入、文风复刻。

用于从写作研究报告（题材×平台级）中提取可执行写作约束，产出"写作研究模板"，作为下游写/审/改 Skill 的题材×平台默认约束基线。蒸馏源默认扫描小说项目根"写作研究/"目录 + "调研报告/"目录 + "CommonSkills/写作研究/"目录；支持指定目录、文件、URL 或 网络搜索内容。关键词：蒸馏写作研究、研究报告提取、题材平台约束、写作约束基线、规则提取。

用于在已有素材库目录（默认：项目根/素材库/）中定向补充、扩写或新建素材条目。适合素材库缺件诊断、定向搜索补充、按格式落盘、同步更新总索引与搜索日志的全流程闭环操作。关键词：补充素材、素材库缺件、素材收集、桥段池补全、人物设定填充、名场面扩写、搜索补素材、素材格式标准化。

用于设计单元案、案件母板或事件引擎。适合把局部事件做成可供章节拆分、主线供血、规则显影、人物代价与案件余波同时成立的结构骨架。这里的“主线供血”默认指：推进主线关键问题、补入可回收拼图或抬升核心冲突压力。关键词：事件案件引擎、单元案、证据链、嫌疑池、案件余波、主线供血。

用于设计、重写、补强人物传记。适合产出可回指、可核查、可直接调用的人物裁判源，并统一承接传记模板、动机代价、能力边界、关系网、成长时间线、价值观与心理弧线。内置 Nuwa 深度人物心智模型注入（心智模型提炼、表达DNA、决策启发式、矛盾张力、诚实边界）。关键词：设计人物传记、人物裁判源、成长时间线、价值观、关系网、心理弧线、心智模型、表达DNA、决策启发式。

用于设计分部大纲、分卷大纲、卷纲、章清单与章节微型剧本。适合分卷拆解、章清单落地、卷级启动表编排、卷内节奏校准与故事面承接映射。关键词：分卷大纲、卷纲、章清单、卷级启动表、章节微型剧本、卷内节奏。

用于设计、重写或审计小说封面生图提示词。适合把题材核心意象、人物识别、主色调、构图、风格限制、禁行元素与平台展示约束整理成可交付方案。关键词：封面提示词、封面生图、主视觉、构图、主色调、平台展示。

用于设计或重写总大纲、全书总纲与战略层文件组。适合总纲搭建、M0 / X / C 规划、跨卷推进、终局闭环与总纲级验收。关键词：总大纲、全书总纲、M0、X线、C线、跨卷推进、终局闭环。

设计、重写或补强故事设定全品类——包括世界观设定、技术设定、规则/机制设定、社会制度设定、能力/金手指设定、手法/程序链/证据载体设定。用于产出可叙事化、可证据化、边界与代价明确的作者侧设定裁判源，覆盖规则条款、误导与证伪、程序摩擦、镜头包、实际文件写回与跨阶段演进。支持联动竞对分析、网络调研、深度研究与结构化深入思考，确保设定既有真实感锚点又有竞争辨识度。适合所有品类故事设定的创建、重构、补强与规则边界修复。

用于设计、重写或审计故事面。适合故事面搭建、卷级供血检查、硬抓手补强、跨卷交接与可拆卷可拆章的故事面重构。关键词：故事面、一句话谜面、供血、硬抓手、卷级推进、跨卷交接。

用于设计、筛选、重排和审计小说的全层级标题系统——包括全书书名、分部标题、分卷标题与章节标题。标题即开篇——读者看标题的决策模式与看开头完全一致，但标题受字数限制更严格，且各平台显示规则不同。适合为全书、分部、分卷、多平台版本或逐章生成真正像书名的候选标题，并形成可复盘的命名方案。关键词：设计标题、书名候选、平台适配书名、标题系统、章标题、分卷标题、标题字数限制、标题Hook。

用于设计、重写或维护线索台账、伏笔台账与回收计划。适合把线索、嫌疑、误导、伏笔、回收窗口与兑现后果写成作者可审计、可回指、可跨卷追踪的统一账本。关键词：线索台账、伏笔台账、回收计划、回收窗口、兑现后果、推理公平性。

Fourteen posts of being wrong in production, compressed to checkboxes

Healthy nodes, a quiet network, 300 restarts in three days, and a latency budget measured in milliseconds

Discovery worked. Ping worked. Every TCP connection timed out, and later the tunnel only worked when someone had a terminal open.

Every VM came back. The cluster did not. Declarative systems converge on config, and the datapath isn't config.

A surprising share of AI-in-the-terminal failures aren't the AI. They're zsh, and a version of bash from 2006.

A Claude Code plugin turns standalone project configuration into a namespaced, installable extension that teams and communities can update as one unit.

None of the safety came from the model. It came from six boring habits.

Skills package instructions and references. Subagents run work in a separate context and return results. They solve different problems and can be composed deliberately.

Six hours in, one step left, everything green, and the incident that didn't happen

CLAUDE.md carries persistent project context. Skills load reusable procedures when relevant. Separating stable facts from task-specific workflows keeps both easier to maintain.

Twenty minutes recovering secrets that never existed, and the one sentence from a human that ended it

An API request routing a model's tool call through an approval gate to a remote MCP server

31 config keys, two audits, and why the first one was wrong in both directions

The official MCP Registry stores standardized server metadata rather than package code. Publishers verify a namespace, describe installation or remote access, and submit immutable versions.

Everyone looks at the Dockerfile. The file that actually leaked the key was the project file.

Remote MCP authorization uses established OAuth standards, but secure integration still requires issuer validation, least-privilege scopes, protected token handling, and server-side enforcement.

"Copy it over and switch the reference" is two steps, and the outage lives in the one nobody checks

stdio fits local processes and prototypes. Streamable HTTP fits hosted services and shared integrations. The right choice follows where the capability runs and who must reach it.

The most important rule wasn't about what I could change. It was about what I was allowed to display.

Tools perform operations, resources expose readable context, and prompts provide reusable templates. Choosing the correct primitive makes an MCP server easier to understand and govern.

Run autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable checkpoints. Usage: /autopilot target.com [--paranoid|--normal|--yolo]

Build an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common chain patterns: IDOR→ATO, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth. Usage: /chain

Active vulnerability hunting. Two-track dispatcher — asks Red Team vs WAPT, hands off to hunt-dispatch skill and sibling commands. Usage: /hunt target.com | /hunt *.target.com | /hunt targets.txt [--vuln-class X] [--source-code P] [--chrome]

On-demand intelligence fetch for a target — CVEs, disclosed reports, new features. Pulls NVD/GitHub-Advisory CVEs + bundled disclosed reports + hunt memory context. Usage: /intel target.com

Inspect or rotate the autopilot ledger JSONL files (findings.jsonl, negatives.jsonl). Caps file size and keeps N rotated backups so memory does not grow unbounded.

Pick up a previous hunt on a target — shows hunt history and untested surface from the autopilot ledger. Usage: /pickup target.com

Run full recon pipeline on a target — subdomain enum (Chaos API + subfinder), live host discovery (dnsx + httpx), URL crawl (katana + waybackurls + gau), gf pattern classification, nuclei scan. Outputs to recon/<target>/ directory. Usage: /recon target.com

Optional manual note on a target or the last confirmed finding. Capture is automatic during autopilot; this is for extra context. Usage: /remember

Write a submission-ready bug bounty report. Generates H1/Bugcrowd/Intigriti/Immunefi format with CVSS 3.1 score, proof of concept, impact statement, and remediation. Run /validate first. Usage: /report

Mandatory pre-flight scope check — verify an asset is in scope BEFORE any HTTP touch. Deterministic (deny-wins, default-deny) via engine/scope.py against the engagement's scope.md. Blocks out-of-scope testing. Usage: /scope <asset> [<asset> ...]

Show ranked attack surface for a target from its recon manifest + hunt memory. Deterministic backing is `cbh surface <target>` (reads recon/<target>/manifest.json); LLM layer adds ledger signal. Usage: /surface target.com

Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP lock bypass, authority retention, bonding curve exploits, fake renounce, sandwich amplification). Manual 8-class grep audit (with an optional automated scanner if present). Usage: /token-scan <contract_path_or_dir> [--chain solana]

Quick 7-Question Gate triage on a finding before writing a report. Kills N/A submissions before they happen. Faster than /validate — for quick go/no-go decisions. Usage: /triage

Validate a finding — runs 7-Question Gate + 4-gate checklist. Kills weak findings before report writing. Prevents N/A submissions that hurt validity ratio. Usage: /validate

Smart contract security audit — runs through 10 bug class checklist (accounting desync, access control, incomplete path, off-by-one, oracle errors, ERC4626, reentrancy, flash loan, signature replay, proxy/upgrade). Applies pre-dive kill signals first. Generates Foundry PoC template for confirmed findings. Usage: /web3-audit <contract.sol>

Crabbox is a single CLI (`crabbox`). Commands are top-level, not nested under a

`crabbox actions` prepares a leased box from your repository's own GitHub

See [Runtime adapter stack](../features/runtime-adapter-stack.md) for the

`crabbox admin` groups trusted operator controls for coordinator-backed leases and the cloud resources behind them. Use it to inspect every lease the broker tracks, reconcile expired leases against live cloud state, force-release or delete a backing server, print provider IAM pol

`crabbox artifacts` turns a desktop lease into durable QA evidence: it collects

AI agent orchestration kit for Windows, Linux/MacOS with Codex skills, hooks, routing rules and profiles for Claude, OpenCode, Cursor, Gemini and Windsurf.

Skills & reviewer agents for AI-first climate science — built and used by a PhD atmospheric scientist

出行路书工作流 skill：联网实查 + 多源交叉验证，产出可核验、能执行的旅行攻略。覆盖吃住行游拍避全维度，附美食情报卡、基准骨架与校验工具，支持一键部署在线版。

Self-hosted AI code reviewer with indexed PR reviews, walkthroughs, vulnerability scanning, dependency graphs, custom rules, and a learning loop.

🧬 Extend EvoScientist with Installable Skill & Knowledge Packs

Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops t…

Automatic memory consolidation for OpenClaw agents — like sleep for your AI. Powered by MyClaw.ai

🗂 The essential checklist for modern web development, for humans and AI agents

Distribb CLI, Claude, Codex, Hermes, OpenClaw skill for AI-powered SEO. Write content with your own AI, publish through Distribb's backlink network.

Open-source AI browser agent — type plain-language commands and Bah operates the web for you. Works with cloud AI (DeepSeek, Mistral, NVIDIA) or local Ollama mo…

DeepSeek Harness Desktop (dsh-desktop). EAC: Embracing All Creation (揽尽万象). Bundled Node.js runtime with full dsh-CLI kernel, one-click startup, 10 built-in UI…

Use your ChatGPT / Codex subscription with DeepSeek Harness via OAuth, with model access, usage quotas, search, and image generation — no API key or Codex CLI r…

Local-first A-share research workbench for DeepSeek Harness: market dashboards, watchlists, valuation, four investor agents, versioned reports, and continuous p…

Open-source video pipeline (clipper, AI video & more) — scout trends, clip long videos, generate captioned shorts, design motion graphics. Local-first, BYOK. AG…

Desktop app for the pi coding agent: streaming timeline, Git review with hunk staging, session tree, native UI for pi extensions. Windows · macOS · Linux. pi 编程…

Zero-dependency browser video editor that AI agents can drive — JSON timeline, MCP + REST, live-reloading UI

Personal Context Manager for Claude Code. Your life in walnuts.

Fast way to switch between Claude Code configuration profiles

AutoClip｜一个链接，一键出片。开源 AI 视频剪辑桌面工具，将播客、访谈、课程等长视频自动剪成短视频，生成字幕、封面和发布文案，适配抖音、小红书、TikTok、Reels 与 YouTube Shorts。Open-source AI video clipping & content repurposing.