ByteRover

低风险
作者:byteroverinc | 审计时间:2026-02-26T09:59:20.936Z | 规则集:0.2.0

快速安装

将技能安装到你的 Agent

clawhub install byterover

技能介绍

另请参阅: [WORKFLOWS.md] (WORKFLOWS.md)了解详细的模式和示例, [TROUBLESHOOTING.md] (TROUBLESHOOTING.md)了解错误处理

“在这个代码库中, X是如何工作的?”
“Y有哪些图案?”
“Z有约定吗?”
修复了一个错误并找到了根本原因
做出架构决策

使用场景

1 工作前查询 :获取有关模式、惯例和过去决策的现有知识
2 使用特定模式实现功能

文档(原文)

来源:SKILL.md
以下为作者原文(通常为英文)。安装请以页面顶部“快速安装”为准。

name: byterover
description: "Manages project knowledge using ByteRover context tree. Provides two operations: query (retrieve knowledge) and curate (store knowledge). Invoke when user requests information lookup, pattern discovery, or knowledge persistence. Developed by ByteRover Inc. (https://byterover.dev/)"
metadata:
author: ByteRover Inc. (https://byterover.dev/)
version: "1.2.1"

ByteRover Context Tree

A project-level knowledge repository that persists across sessions. Use it to avoid re-discovering patterns, conventions, and decisions.

Why Use ByteRover

  • Query before working: Get existing knowledge about patterns, conventions, and past decisions before implementing
  • Curate after learning: Capture insights, decisions, and bug fixes so future sessions start informed

Quick Reference

Command When Example
brv query "question" Before starting work brv query "How is auth implemented?"
brv curate "context" -f file After completing work brv curate "JWT 24h expiry" -f auth.ts
brv status To check prerequisites brv status

When to Use

Query when you need to understand something:

  • "How does X work in this codebase?"
  • "What patterns exist for Y?"
  • "Are there conventions for Z?"

Curate when you learned or created something valuable:

  • Implemented a feature using specific patterns
  • Fixed a bug and found root cause
  • Made an architecture decision

Curate Quality

Context must be specific and actionable:

# Good - specific, explains where and why
brv curate "Auth uses JWT 24h expiry, tokens in httpOnly cookies" -f src/auth.ts

# Bad - too vague
brv curate "Fixed auth"

Note: Context argument must come before -f flags. Max 5 files.

Best Practices

  1. Break down large contexts - Run multiple brv curate commands for complex topics rather than one massive context. Smaller chunks are easier to retrieve and update.

  2. Let ByteRover read files - Don't read files yourself before curating. Use -f flags to let ByteRover read them directly:

    # Good - ByteRover reads the files
    brv curate "Auth implementation details" -f src/auth.ts -f src/middleware/jwt.ts
    
    # Wasteful - reading files twice
    # [agent reads files] then brv curate "..." -f same-files
    
  3. Be specific in queries - Queries block your workflow. Use precise questions to get faster, more relevant results:

    # Good - specific
    brv query "What validation library is used for API request schemas?"
    
    # Bad - vague, slow
    brv query "How is validation done?"
    
  4. Signal outdated context - When curating updates that replace existing knowledge, explicitly tell ByteRover to clean up:

    brv curate "OUTDATED: Previous auth used sessions. NEW: Now uses JWT with refresh tokens. Clean up old session-based auth context." -f src/auth.ts
    
  5. Specify structure expectations - Guide ByteRover on how to organize the knowledge:

    # Specify topics/domains
    brv curate "Create separate topics for: 1) JWT validation, 2) refresh token flow, 3) logout handling" -f src/auth.ts
    
    # Specify detail level
    brv curate "Document the error handling patterns in detail (at least 30 lines covering all error types)" -f src/errors/
    

Prerequisites

Run brv status first. If errors occur, the agent cannot fix them—instruct the user to take action in their brv terminal. See TROUBLESHOOTING.md for details.


See also: WORKFLOWS.md for detailed patterns and examples, TROUBLESHOOTING.md for error handling

安全审计

低风险

摘要

使用ByteRover上下文树管理项目知识。提供两个操作:查询(检索知识)和策划(存储知识)。当用户请求信息查找、模式发现或知识持久性时调用。由ByteRover Inc. (https://byterover.dev/)开发

风险画像 危险 隐私 范围 声誉 质量

ToxicSkills 分析

黑名单
未命中
提示词注入
未检测到

当前静态检测未发现 Toxic 信号。

关键风险 0 项

暂无 LLM 风险要点(LLM 未启用或无缓存)。

确定性发现(证据)

未检测到发现。

评分标准

每个技能从 5 个维度评分,加权总分决定星级。

代码毒性 100/100 (权重 30%)
隐私风险 100/100 (权重 25%)
权限范围 100/100 (权重 20%)
作者声誉 75/100 (权重 15%)
代码质量 70/100 (权重 10%)

星级说明

5★ 安全 — 总分 ≥ 80
4★ 良好 — 总分 70–79
3★ 注意 — 总分 60–69
2★ 有风险 — 总分 40–59
1★ 危险 — 总分 < 40

为何是这个评分?

所有维度均高于 60 分,该技能通过安全基线。

更多技能

VettedSkillsHub

从 ClawHub(ClawdBot / OpenClaw 官方市场)精选下载量前 100 的技能,进行独立 5 维度安全审计。证据透明可查,评分可复现,一键安装。

关于

本站评分为 best-effort 静态分析,分数可复现、证据可追溯。在敏感环境中仍应进行人工审计与隔离部署。

© 2026 VettedSkillsHub。ClawdBot 和 OpenClaw 为社区项目。