Starcat: Skill for Claude Code

.claude/skills/starcat-supports-ops/SKILL.md

starcat-supports-ops is a skill for Claude Code, Codex from starcat-app/Starcat. It costs 97 tokens per session (970 once invoked), scanned A, original, MIT.

A set of procedures for running and maintaining Starcat’s self-hosted Go services locally and on Fly.io, a cloud hosting platform. It covers service status, health checks, secrets, backups, and data restoration.

In plain words
What is it for?
Use it to start or stop local services, check production health, synchronize Fly.io secrets, generate API keys, back up or restore stored data, and warm the wiki cache.
Why use it?
It provides controlled checks and recovery steps for backend services without exposing secret values or accidentally performing risky production operations.

Skill for Claude CodeCodex

Written for Claude Code and Codex: installed under .claude/, but also agents/openai.yaml present.

This is starcat-app/Starcat's own configuration. It tells Claude Code and Codex how to work on Starcat itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything Starcat configures →

Reuse

Borrowing it

Nothing to install: this file belongs to starcat-app/Starcat. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/starcat-app/Starcat/main/.claude/skills/starcat-supports-ops/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/starcat-app/Starcat

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for starcat-supports-ops

README.md
[![agentmods](https://agentmods.dev/badge/skills/starcat-app/starcat/starcat-supports-ops/github.svg)](https://agentmods.dev/skills/starcat-app/starcat/starcat-supports-ops)
Your own site
<a href="https://agentmods.dev/skills/starcat-app/starcat/starcat-supports-ops"><img src="https://agentmods.dev/badge/skills/starcat-app/starcat/starcat-supports-ops/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for starcat-supports-ops

Your own site · 80×15
<a href="https://agentmods.dev/skills/starcat-app/starcat/starcat-supports-ops"><img src="https://agentmods.dev/badge/skills/starcat-app/starcat/starcat-supports-ops.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 97 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 970 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00097 $0.00970
Opus 5 $0.00048 $0.00485
Sonnet 5 $0.00019 $0.00194
Haiku 4.5 $0.00010 $0.00097

Measured 11d ago against content hash d147c8dcc64b, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

starcat-supports-ops scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/starcat-supports-ops/SKILL.md · 58 lines

How it starts

The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Starcat Supports 后端运维

使用这个 skill 处理 supports/ 下自建后端 API 的本地联调和 Fly.io 运维。所有说明必须使用中文;命令、路径、环境变量、服务名等技术字面量保持原文。

硬性规则

  • 先说明操作计划和副作用,等 dong4j 明确确认后再执行会改变外部状态的命令。
  • 对生产 Fly.io 操作默认先只读检查:make fly-status-allmake fly-health-allfly secrets list
  • 不要打印 .env 或 Fly secrets 明文;涉及 key 的命令只报告变量名和同步结果。
  • fly-restore-*fly-wipe-data-*fly secrets setfly deploy 都是高风险操作,必须单独确认。
  • 保留无关 dirty files;本地服务启动/停止不应修改 Swift 代码或文档。

入口选择

任务 推荐入口
启动全部本地 Go API make start-supportscd supports && ./start-all.sh
停止全部本地 Go API make stop-supportscd supports && ./start-all.sh --stop
查看本地服务状态 cd supports && ./start-all.sh --status
同步全部 Fly secrets make sync-fly-secretsmake -C supports fly-secrets-all
查看 Fly 状态/健康 make -C supports fly-status-all / make -C supports fly-health-all
备份 Fly /data make -C supports fly-backup-<service>
恢复 Fly /data make -C supports fly-restore-<service> LOCAL_DB=...RESTORE_ARCHIVE=...
生成 API key bash supports/scripts/gen-api-key.sh [count] [--env]
预热 wiki 缓存 bash supports/scripts/warm-wiki-cache.sh --dry-run 后再决定是否真实预热
把 supports .env key 写入客户端编译配置 make setup-production-api-keys

标准工作流

  1. 读取 references/ops-map.md,确认目标服务、命令和风险等级。
  2. 先做只读检查:
    • git status --short
    • make -C supports fly-health-all 或本地 ./start-all.sh --status
    • 对 secrets 只用 fly secrets list -a <app>,不要读取或输出值。
  3. 说明命令会影响本地进程、Fly secrets、Fly /data、还是客户端配置。
  4. 等确认后执行。
  5. 执行后验证:
    • 本地服务:./start-all.sh --status 和对应 /healthz
    • Fly secrets:fly secrets list -a <app>
    • Fly 备份:检查 supports/backups/<app>/<timestamp>/data.tar.gzMANIFEST.txt
    • Fly 恢复:查看 /data 列表和 /healthz

重要提醒

  • supports/start-all.sh 必须从 supports/ 根启动,它会进入各项目根目录执行服务,不能从 bin/ 目录直接运行服务。
  • 有状态服务是 sharingtrendingweeklywikidiscoveryrecommend 没有持久化卷。
  • Fly restore 会覆盖生产 /data,恢复前先建议备份。
  • sync-production-api-keys-from-env.sh 会重写 Configs/Secrets.xcconfig,这是仓库文件变更,不是只读运维。

Read the full file on GitHub · 58 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 58 lines · 97 tokens per session scan A d147c8dcc64b

Subscribe to this mod's changes

starcat-supports-ops is a skill published in the GitHub repository starcat-app/Starcat (163 stars, last pushed yesterday), licensed MIT. It adds 97 tokens to every session and 970 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.