houtu-project-skills

agent
Guvenlik Denetimi
Basarisiz
Health Gecti
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 18 GitHub stars
Code Basarisiz
  • child_process — Shell command execution capability in cli/install.js
  • execSync — Synchronous shell command execution in cli/install.js
  • fs.rmSync — Destructive file system operation in cli/install.js
  • os.homedir — User home directory access in cli/install.js
  • fs module — File system access in cli/install.js
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This project serves as a curated collection of engineering best practices, tooling, and AI agent skills designed to support the entire software development lifecycle. It primarily functions as a plugin marketplace to assist with documentation syncing and Java framework dependency management.

Security Assessment
Overall risk: High. The tool's installation script (`cli/install.js`) performs multiple highly sensitive operations. It executes synchronous shell commands and accesses the user's home directory to perform destructive file system deletions (`fs.rmSync`). While there is no evidence of hardcoded secrets, network requests, or dangerous application permissions, the unchecked capability to silently run arbitrary shell commands and delete files poses a severe security threat if the code is altered or compromised in the future.

Quality Assessment
The project is actively maintained, with its last push occurring today. It benefits from a clear README, provides dual-language documentation, and uses the highly permissive MIT license. However, community trust is currently quite low given the modest number of stars.

Verdict
Use with caution — while the project appears well-intentioned, the installation script contains dangerous shell execution and file deletion capabilities that require a thorough manual code review before use.
SUMMARY

A curated collection of skills, practices, and tooling used throughout the project lifecycle — from development to testing and beyond.

README.md

Houtu Project Skills

中文 | English

A curated collection of skills, practices, and tooling used throughout the project lifecycle — from development to testing and beyond.


🌏 About Houtu

Houtu (后土) originates from Chinese mythology and traditional culture, particularly the concept of “黄天后土” — representing the vast sky and the nurturing earth.

Houtu, known as the Earth Deity (后土娘娘), symbolizes:

  • Stability — a solid and reliable foundation
  • Support — bearing and sustaining all things
  • Nurturing — enabling growth and evolution

This project adopts the name Houtu to reflect its purpose:
👉 to serve as a strong, dependable foundation of engineering skills that support the entire project lifecycle.


🎯 Purpose

This repository is designed to:

  • 📦 Collect and organize practical skills used in real-world projects
  • 🔄 Support the full project lifecycle:
    • Development
    • Testing
    • Deployment
    • Maintenance
  • 🧠 Accumulate engineering knowledge and best practices
  • 🚀 Enable continuous learning, iteration, and evolution

🧩 What’s Inside

The repository will continuously evolve and may include:

🔧 Development

  • Coding practices
  • Design patterns
  • Architecture principles
  • Code quality & refactoring

🧪 Testing

  • Unit testing
  • Integration testing
  • Test strategies & frameworks
  • Automation

⚙️ Engineering Workflow

  • Git workflows
  • CI/CD practices
  • Code review guidelines
  • Project collaboration

📈 Project Evolution

  • Iteration strategies
  • Technical decision records
  • Lessons learned
  • Performance optimization

📚 Skills

Skill Description Languages
docs-context Project development context loader & documentation synchronizer. Automatically loads project standards before coding for context correction, completion, and reconstruction, then syncs documentation after code changes. [Details EN/中文] SKILL.md
houtu-dependencies Houtu enterprise Java framework usage guide. Helps select the correct module, annotation, and API for scenarios like session management, distributed locking, data encryption, gray routing, and more. [Details EN/中文] SKILL.md

📥 Installation

Two installation paths — pick whichever fits your workflow.

Option A — Claude Code native plugin marketplace

Subscribe the repo as a marketplace, then install the individual skills you need.

/plugin marketplace add lujiafa/houtu-project-skills

# Install on demand
/plugin install docs-context@houtu-project-skills
/plugin install houtu-dependencies@houtu-project-skills

/reload-plugins

Plugin skills are namespaced as /<plugin>:<skill>, e.g. /docs-context:docs-context, /houtu-dependencies:houtu-dependencies.

Option B — npx CLI (works across every supported tool)

Install skills via npx. Requires Node.js >= 18 and git.

List available skills:

npx houtu-project-skills list [--version <version>]

Install command:

# Project-level
npx houtu-project-skills install <skill-name> --tool <tool-name> [--version <version>]

# Global
npx houtu-project-skills install <skill-name> --tool <tool-name> [--version <version>] --global

Claude Code

# Project-level
npx houtu-project-skills install docs-context --tool claude

# Global
npx houtu-project-skills install docs-context --tool claude --global

Codex

# Project-level
npx houtu-project-skills install docs-context --tool codex

# Global
npx houtu-project-skills install docs-context --tool codex --global

OpenCode

# Project-level
npx houtu-project-skills install docs-context --tool opencode

# Global
npx houtu-project-skills install docs-context --tool opencode --global

Antigravity

# Project-level
npx houtu-project-skills install docs-context --tool antigravity

# Global
npx houtu-project-skills install docs-context --tool antigravity --global

Cursor

# Project-level
npx houtu-project-skills install docs-context --tool cursor

# Global
npx houtu-project-skills install docs-context --tool cursor --global

Trae

# Project-level
npx houtu-project-skills install docs-context --tool trae

# Global
npx houtu-project-skills install docs-context --tool trae --global

Qoder

# Project-level
npx houtu-project-skills install docs-context --tool qoder

# Global
npx houtu-project-skills install docs-context --tool qoder --global

🌱 Philosophy

Build solid foundations. Enable continuous growth.

  • Start from practical skills
  • Focus on real-world applicability
  • Evolve through projects and iteration
  • Grow into a systematic engineering knowledge base

🚧 Status

This is a growing repository.
Content will be continuously added, refined, and structured over time.


🤝 Contribution

Contributions are welcome!

If you have:

  • Practical skills
  • Engineering insights
  • Lessons from real projects

Feel free to:

  • Open an issue
  • Submit a pull request

📜 License

MIT License

Yorumlar (0)

Sonuc bulunamadi