MCPInstall

ccf-common

Required shared preflight for every CCFA skill after ccf-humanization: apply routing, scope, prerequisites, evidence rules, handoffs, and artifact contracts. Also maintain and audit these shared rules. Research deliverables remain with their specialist owners.

Installs
2K
Last 24h
+18
Trending rank
#6341
Security
Not audited

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/mikubaka88/ccfa-skills --skill ccf-common
  1. 01

    Install

    Run the command in your project. The CLI asks which agents to install for.

  2. 02

    Describe the task

    Ask your agent for something this skill covers. It loads ccf-common automatically when relevant.

  3. 03

    Review the result

    The agent follows the SKILL.md steps, scripts and references bundled with the skill.

SKILL.md

The instructions your agent reads when the skill is triggered.

CCF Common

Family File Contract

Before writing, resolve the canonical output and one stable working directory per task/artifact. Reuse explicit or established task paths; otherwise use project-root ccfa-workfiles/<purpose>/<artifact-id>/, with source/, assets/, cache/, and build/ only as needed. Update current files in place; do not scatter intermediates or create iteration copies. Preserve inputs and required evidence; clean only verified disposable files created by this task. Use UTF-8 text I/O and check Chinese text after saving or rendering. For file work, apply artifact-contracts.md and reuse the same paths across skill transitions.

Collaboration Contract

Before applying these shared controls, activate ccf-humanization unless its baseline is already active. Apply this entry once, then continue specialist work; do not recursively re-enter either preflight. Reuse applicable rules across contributors.

Keep one integrating owner and actively use other skills to resolve missing prerequisites or check material findings. Reuse applicable evidence; do not skip necessary groundwork to save tokens. Before finalizing, integrate contributions and verify affected results. Follow the conditional cooperation routes; avoid unrelated stages and duplicate reports.

Core Rule

This is the shared control module activated before every CCFA specialist, after ccf-humanization. It sets the task's scope, integrating owner, relevant prerequisites, evidence boundaries, and file paths while specialist skills produce research deliverables. Applying these controls does not run the maintenance workflow or require a governance report.

Invocation Controls

CCFA Handoff Mode: PARTIAL (Recommended). Follow metadata.ccf_skill_controls.handoff_question_mode and references/handoff-modes.md. On a direct invocation, ensure Humanization's baseline has been read before applying these controls. Do not recursively restart either preflight. Reuse applicable rules across contributors and read only the shared references needed for the current decision.

Family Preflight

Resolve the requested result, scope/permissions, integrating owner, and missing or reusable prerequisites. Use references/routing.md for collaboration and references/handoff-modes.md for transitions. Apply evidence/privacy rules when handling sources or private material, artifact rules before file work, and review standards when assessing. Reuse loaded rules and known paths; create no intake form or state file merely to activate this skill. Continue the specialist task once the applicable controls are established. Reserve the maintenance workflow below for actual family-maintenance requests.

Discovery metadata and a named preflight are not evidence that its instructions were read. Apply the visible entry content, and restore missing or truncated relevant sections through targeted reads. When diagnosing a reported trigger failure, distinguish the installed version, actual tool reads, selected mode, and resulting behavior; do not invent a loading receipt. Ordinary tasks need no startup report or persistent trace.

Resolve preferences once with this skill's scripts/preferences.py resolve, adding --project <established-root> when a project is known; reuse the compact result across handoffs. No file means defaults, with no write or question. Current explicit instructions override project, user, and built-in defaults. These choices govern optional extra work only; necessary checks and preflights remain active. Read only relevant sections of preferences.md for enhancement triggers, first-time choices, configuration changes, or a missing resolver/error; do not load its whole guide or launch the web page on every task.

Keep the current user goal, justified route, and next action distinct. Explore different mechanisms when the task calls for discovery; preserve the selected route during execution unless a material reason changes it. Distinguish proposed, executed, and verified work. After lost context or repeated drift, reconcile actual artifacts and take one bounded step without lowering the deliverable standard. Repeated work needs a new observation, changed hypothesis, or concrete repair. For long tasks, stalled progress, or material recovery, load continuity.md; short tasks need no extra file or review call.

An explicit request for autonomous research or repeated experiments routes to the orchestrator's research loop. It uses the task's experiment scope and budget, not the optional maintenance-candidate allowance. Ordinary writing, concept review, and planning do not start experiments.

Shared Controls

Load only the references needed for the current preflight decision or maintenance task:

  • references/routing.md: Use to resolve which CCFA skill owns a request and to avoid trigger overlap.
  • references/task-modes.md: Use for exploratory/quick/standard depth, authorization-aware continuation, selective context, host-supported parallel work, and GPT-6 adaptation.
  • references/review-output-standards.md: Use to keep numeric scoring, multi-reviewer panels, score-change conditions, and visible output quality consistent.
  • references/handoff-modes.md: Use to interpret metadata.ccf_skill_controls.handoff_question_mode.
  • references/preferences.md: Resolve remembered optional enhancements, precedence, and the local three-language configuration page; mandatory preflights and necessary checks remain active.
  • references/continuity.md: Preserve task intent through rerouting and recovery; use compact state and optional record validation only when useful.
  • references/privacy-and-evidence.md: Use when handling manuscripts, reviews, rebuttals, private drafts, literature searches, or evidence claims.
  • references/source-registry.yaml: Use as the shared source inventory for venue rules, review methods, exemplar records, and research-workflow references.
  • references/ccf-a-venue-map.md: Use when a non-writing skill needs venue-family mapping without depending on ccf-paper-writer.
  • references/skill-trigger-registry.yaml: Use as the canonical trigger registry; compare descriptions and agent prompts with the same ownership boundaries.
  • references/artifact-contracts.md: Use whenever a skill creates or revises files; it defines ownership, canonical paths, minimal intermediate-file generation, overwrite-in-place defaults, task-scoped cleanup, and required retained history.
  • references/ccfa-yaml-contract.md: Use for the shared ccfa.yaml project-state schema.

Maintenance Workflow

  1. Follow the current user scope and existing authorization before defaults; for no-new-files maintenance, edit existing surfaces only. When editing any CCFA family skill, preserve the metadata.ccf_skill_controls block and keep its keys aligned with references/handoff-modes.md.
  2. Use references/routing.md before adding new trigger language to prevent overlapping ownership.
  3. Use references/task-modes.md before changing checklist strictness, quick polishing, standard review, or output contracts.
  4. Use references/review-output-standards.md before changing scorecards, reviewer panels, score-risk language, or final output self-check rules.
  5. Use references/privacy-and-evidence.md before adding any browsing, citation, novelty, scoring, experiment-result, compression, or rebuttal instruction.
  6. Use references/artifact-contracts.md before changing generated filenames, revision behavior, report folders, caches, attempt archives, or ledgers. Default to one canonical artifact per deliverable, one stable working directory per task/artifact, and cleanup of task-created disposable files before delivery. Preserve required evidence and other tasks' files.
  7. Never commit personal absolute paths, usernames, expanded home directories, private local skill roots, or machine-specific command examples. Use $CODEX_HOME, $HOME, repo-relative paths, or non-identifying placeholders.
  8. Put new public sources in references/source-registry.yaml; do not duplicate long URL lists in sibling source-notes.md files. Local references must use repo-relative or non-identifying local:/repo: identifiers, not machine paths.
  9. Run scripts/check_sources.py after source-registry edits. The script reports issues only and must not rewrite registry files.
  10. Run scripts/check_v04.py for family metadata, registry, script syntax, referenced resources, and regression checks; then run scripts/check_path_privacy.py before finalizing CCFA-family changes that touch docs, examples, source records, scripts, diagrams, or release files.

Output Contract

For ordinary preflight, return control to the specialist without a separate report. When auditing or updating CCFA skills, report:

Routing impact:
Handoff mode impact:
Private-material safety:
Source-registry changes:
Score-risk language changes:
Validation result:

FAQ

What does the ccf-common skill do?

Required shared preflight for every CCFA skill after ccf-humanization: apply routing, scope, prerequisites, evidence rules, handoffs, and artifact contracts. Also maintain and audit these shared rules. Research deliverables remain with their specialist owners.

How do I install ccf-common?

Run npx skills add https://github.com/mikubaka88/ccfa-skills --skill ccf-common in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/ccf-common/ (personal) or .claude/skills/ccf-common/ (project).

Which AI agents can use ccf-common?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is ccf-common safe to install?

No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.

Who maintains ccf-common?

It is published by mikubaka88 in mikubaka88/ccfa-skills. It has 2,002 recorded installs.

More from mikubaka88/ccfa-skills

View all →

ccf-paper-writer

mikubaka88/ccfa-skills

Draft, revise, polish, compress, or presentation-adapt CCF manuscript prose. Use for 写作, 润色论文, research documents to complete papers, 完整初稿, 实验留空, 改写, 压缩论文, abstracts, sections, and slides. Draft content before fitting pages; preserve evidence and format. Assessment without rewriting belongs to ccf-paper-reviewer; rebuttal belongs to ccf-rebuttal-writer.

Docs & Writing2K installs

ccf-paper-reviewer

mikubaka88/ccfa-skills

Review manuscript claims, evidence, and writing without rewriting. Use for 文章审核, 审稿, 稿件有什么硬伤, 结论站得住吗, 投稿成熟度, writing review, and version comparison. Return a structured scientific or writing review; scores need not be explicitly requested. Concept-only judgment belongs to ccf-idea-reviewer even with a full PDF; requested prose edits belong to ccf-paper-writer.

Education & Science1.9K installs

ccf-humanization

mikubaka88/ccfa-skills

Required first preflight before every CCFA skill, including research, review, retrieval, experiments, visuals, and maintenance. Keep reasoning and communication direct, remove empty defensive framing, and preserve evidence and uncertainty. Also use for 去防御性 and 论文人性化. Apply prose edits only within the authorized task; specialist skills retain ownership.

ccf-idea-optimizer

mikubaka88/ccfa-skills

Develop and optimize rough CCF research ideas into problems, insights, mechanisms, and evidence plans. Use for 优化idea, 具象化idea, 找方向, 方向探索, and rescue routes when development is the requested deliverable. Judging whether an idea is worthwhile, novel, or coherent belongs to ccf-idea-reviewer even without scores; manuscript edits belong to ccf-paper-writer.

Docs & Writing1.9K installs

ccf-experiment-designer

mikubaka88/ccfa-skills

Design and interpret CCF experiments: datasets, baselines, metrics, ablations, execution specifications, observed feedback, and result-table contents. Use for 设计实验, 消融, benchmark planning, 实验结果分析, and evidence design within requested autonomous research. Preserve real values. Orchestrator coordinates research-loop execution; visual styling and broad retrieval have separate owners.

Frontend & Design1.9K installs

ccf-literature-searcher

mikubaka88/ccfa-skills

Find and verify external literature, prior art, datasets, benchmarks, and citation candidates. Use for 文献检索, 相关工作, benchmark搜索, and research opportunity maps. Recurring recent-paper watch belongs to ccf-literature-monitor; existing-citation audits, manuscript assessment, and result schemas have separate owners.

Media & Creative1.9K installs

Popular security skills

View category →

azure-compliance

microsoft/azure-skills

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

OfficialSecurity567K installs

minimal-run-and-audit

lllllllama/rigorpilot-skills

Rigor Run skill for README-first deep learning repo reproduction. Use when the task is specifically to capture or normalize evidence from the selected smoke test or documented inference or evaluation command and write standardized reprooutputs/ files, including patch notes when repository files changed. Do not use for training execution, initial repo intake, generic environment setup, paper lookup, target selection, hidden scientific-meaning changes, or end-to-end orchestration by itself.

Security477.4K installs

seo-audit

coreyhaines31/marketingskills

When the user wants to audit, review, or diagnose SEO issues on their site. Also use when the user mentions "SEO audit," "technical SEO," "why am I not ranking," "SEO issues," "on-page SEO," "meta tags review," "SEO health check," "my traffic dropped," "lost rankings," "not showing up in Google," "site isn't ranking," "Google update hit me," "page speed," "core web vitals," "crawl errors," "indexing issues," "stuck on page 2," "striking distance keywords," "title tag rewrite," "low CTR," "local SEO," "Google Business Profile," or "map pack." Use this even if the user just says something vague like "my SEO is bad" or "help with SEO" — start with an audit. For building pages at scale to target keywords, see programmatic-seo. For adding structured data, see schema. For AI search optimization, see ai-seo.

Security238.7K installs

firebase-security-rules-auditor

firebase/agent-skills

Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks. Use when auditing/reviewing rules, running red-team rule assessments, or scoring against auditor checklists. Don't use for Firebase CLI (login, deploy), Auth, Crashlytics, Remote Config, or database queries.

OfficialSecurity139.1K installs

audit

pbakaus/impeccable

Run technical quality checks across accessibility, performance, theming, responsive design, and anti-patterns. Generates a scored report with P0-P3 severity ratings and actionable plan. Use when the user wants an accessibility check, performance audit, or technical quality review.

Security81.9K installs

competitors

coreyhaines31/marketingskills

When the user wants to create competitor comparison or alternative pages for SEO and buyer-facing use. Also use when the user mentions 'alternative page,' 'vs page,' 'competitor comparison,' 'comparison page,' '[Product] vs [Product],' '[Product] alternative,' 'competitive landing pages,' 'how do we compare to X,' 'competitor teardown,' 'audit our competitor pages,' 'are our comparison pages out of date,' or 'competitive asset audit.' Use this for any content that positions your product against competitors. Covers four formats: singular alternative, plural alternatives, you vs competitor, and competitor vs competitor. For auditing existing claims (not researching competitors from scratch, which is competitor-profiling; not technical SEO on these pages, which is seo-audit), use the asset audit here. For internal battle cards and sales-specific competitor docs, see sales-enablement.

Security79.3K installs