trailofbits/skills✦ 精选0°

open-sourcing

仓库创建 2026年1月15日最近提交 3 小时前SkillHot 收录 2 小时前

⬈ GitHub 仓库 ⬈ SKILL.md 原文件 ⬇ Raw 原始文件

▸ 精选理由

有完整的开源发布清单，适合首次或重大公开发布前检查。

▸ 风险提示

涉及代码/密钥审计与修改，需访问仓库权限。

这个 Skill 做什么

按步骤准备仓库公开发布，包含敏感信息审计和发布自动化。

把私有仓库变成能公开发布的状态：先做 secrets 审计，确定哪些敏感信息不能带出，再补齐许可、文档、CI、语言特定的打包配置和发布自动化。适合准备把仓库公开、做发布前检查或搭建 release 流程时用。特别在于按步骤的 release-readiness 流程，把危险项（密钥等）放在首位，决定后续要不要重建或移除内容。

▸ 展开 SKILL.md 英文原文

This skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public", "check open-source readiness", "choose a license for this project", or "set up release automation" ahead of a public launch. Provides a release-readiness workflow covering secrets hygiene, licensing, documentation, CI, and language-specific packaging.

开发编程开源发布发行准备安全审计通用

6.3k

Stars

545

Forks

仓库内 Skill

+322

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/open-sourcing/skills/open-sourcing/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/open-sourcing/skills/open-sourcing/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Open-Sourcing a Repository

Prepare a repository for public release so that an outsider with no prior
context can build, use, and contribute to it — and so that nothing sensitive
ships with it. Work through the steps in order; the secrets audit comes first
because its outcome (keeping vs. recreating the repository) affects
everything after it.

## When to Use

- Making a private repository public
- Auditing an existing public repository for release quality ("make it
  official")
- Choosing a license for a project
- Setting up packaging, versioning, or release automation ahead of a public
  launch

## When NOT to Use

- Routine development on an already-released project (no release event)
-

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有