CCG is a command-line workflow engine that coordinates Claude, Codex, Gemini, and other models as specialized collaborators on coding tasks. It is used to analyze requests, choose a strategy, delegate work to model-specific roles, and combine their results. The catalogue entries provide the skills, commands, agents, and plugin that implement this workflow.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add fengshao1227/ccg-workflow --skill bt-panelgit clone --depth 1 https://github.com/fengshao1227/ccg-workflowWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/fengshao1227/ccg-workflow/bt-panel)<a href="https://agentmods.dev/skills/fengshao1227/ccg-workflow/bt-panel"><img src="https://agentmods.dev/badge/skills/fengshao1227/ccg-workflow/bt-panel/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/fengshao1227/ccg-workflow/bt-panel"><img src="https://agentmods.dev/badge/skills/fengshao1227/ccg-workflow/bt-panel.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 124 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Tool Misuse · line 129 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- high Privilege Escalation · line 155 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Rogue Agent · line 68 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 68 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00082 | $0.02789 |
| Opus 5 | $0.00041 | $0.01394 |
| Sonnet 5 | $0.00016 | $0.00558 |
| Haiku 4.5 | $0.00008 | $0.00279 |
Grade C, and why
bt-panel scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- ❌ **绝不**直接用 `rm -rf` 删除 `/www/wwwroot/*`，先 `--backup` 再 `--clean` Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
6. **核验** — 执行后 `exec 'curl -I <url>'` 或 `cat .env` 之类读回确认 How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
bt-panel · 宝塔远程操控秘典
一套通过宝塔面板 HTTP API 完成部署 / 运维 / 数据库变更的 Python 工具集。 无需 SSH、无需 rsync、无需本地装 vercel/docker — 只要一个面板地址和 API 密钥。
何时使用
自动触发（魔尊未显式点名时也应主动调用）：
- 用户给出
https://IP:port形式的宝塔面板地址和一串 32 位 API 密钥 - 用户说 "更新线上 / 更新一下 / 发布一下 / 部署到服务器 / 推到宝塔"
- 用户提到具体站点名且路径位于
/www/wwwroot///www/server/下 - 用户要求"操作线上数据库 / 跑一下 SQL / 重启 pm2 / 看一下日志 / 改配置"
- 用户提交项目目录让你"推上去"
不触发：
- 用户只提到 Vercel / Netlify / AWS / 其他平台
- 纯本地开发任务
支持矩阵（面板变体自适应）
本 skill 不假设特定版本 — bt_client.py 首次调用 test() 时会自动探测
面板的 OS / 变体 / 主版本，缓存到 client.panel_info，后续所有方法都据此选择接口。
| 面板 | panel_info 识别 |
状态 | 说明 |
|---|---|---|---|
| 宝塔 Linux v11+ | {os:linux, variant:bt, major:11} |
✅ 已实测 | Debian 12 + v11.6.0，主验证环境 |
| 宝塔 Linux v7/v8/v9/v10 | {major:7-10} |
✅ 支持 | exec_shell 自动走老接口 ExecShellMsg；sql_execute 先试面板 SqlExecute API |
| aaPanel（英文国际版） | {os:linux, variant:aapanel} |
✅ 支持 | API 与宝塔 Linux 完全一致，仅错误消息是英文；write_file 兜底已识别中英双语 |
| 宝塔 Windows 面板 | {os:windows} |
⚠️ 实验 | 文件 / shell / SQL 可用；bt_deploy.py（依赖本地 tar）仅在宝塔 Linux 下完整 |
| 1Panel（飞致云） | — | ❌ 不覆盖 | 完全不同的 REST API，不要用本 skill 操作 1Panel |
| 宝塔企业版 | 同 v11+ | ✅ 预期兼容 | 未实测但 API 同源 |
自动适配要点（你不需要配置）
- Shell 接口：v11+ →
ExecShell；v7–v10 →ExecShellMsg；均失败自动回退另一个 - SQL 执行：先试面板 API（老版本可用），失败退 shell + mysql CLI
- MySQL 路径探测：
/www/server/mysql/bin/mysql→/www/server/mariadb/bin/mysql→/usr/local/mysql/bin/mysql→$(command -v mysql)→mysql - 错误消息识别：中文
"不存在"/"权限"∪ 英文"not exist"/"Permission denied" - Windows MySQL：heredoc 改为临时文件 +
type重定向（cmd 不支持 heredoc）
探测输出示例
python3 bt_client.py test
# 返回里附带：
# "_skill_detected": {"os": "linux", "variant": "bt", "major": 11, "shell": "bash"}
Claude 收到 _skill_detected 后应据此决定：
major < 11+variant=bt→ 可以直接用 SQL API（可能更快）variant=aapanel→ 错误消息会是英文，别困惑os=windows→ 重启命令要改成 Windows 等价（net stop nginx代替systemctl restart nginx）major=0→ 探测失败，面板返回不标准 → 跑test时把原始 JSON 给魔尊看
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 192 lines · 82 tokens per session scan C 6415fe7096d7
bt-panel is a skill published in the GitHub repository fengshao1227/ccg-workflow (5,881 stars, last pushed 6d ago), licensed MIT. It adds 82 tokens to every session and 2,789 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it C with 2 findings (recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
code-review-workflow
Review a change in a fixed order — context, correctness, security, then style — and write feedback that is actionable and ranked by severity. Use when the user asks for a code review, wants a pull request or diff reviewed before merge, asks whether a change is safe to ship, or when the task involves reviewing a patch…
refactoring-workflow
Improve the structure of existing code without changing its behaviour, in small verified steps under a green test suite. Use when the user asks to refactor, clean up, restructure or simplify code, wants to reduce duplication or coupling, is preparing a codebase for a feature it cannot currently accommodate, or when…
airflow-expert
Expert-level Apache Airflow orchestration, DAGs, operators, sensors, XComs, task dependencies, and scheduling. Use when the user mentions orchestration, DAGs, workflow, scheduling, or data pipeline, or when the task involves DAG Fundamentals, Task Dependencies and Branching, Dynamic Task Generation, or Operators and…
git-expert
Expert-level Git version control with advanced workflows, branching strategies, and best practices for team collaboration. Use when the user mentions version control, collaboration, or workflow, or when the task involves Essential Git Commands, Advanced Git Techniques, Branching Strategies, or Conflict Resolution.
absolute-simplify
Use when the user wants to simplify, clean up, refactor, tidy, or refine code — their staged/unstaged git changes or a target file/path. Reduces complexity, flattens nesting, removes redundancy and dead code, scores each change by value (holding low-value churn), then runs tests to prove nothing broke. Invoke on…
absolute-ui
Build polished, intentional UIs with concrete CSS/Tailwind values — typography, color, layout, spacing, dark mode, accessibility, animations, components. Encodes specific, opinionated rules with exact values, not vague advice. Covers buttons, cards, forms, tables, navigation, dashboards, landing pages, onboarding, and…