CtrlK
BlogDocsLog inGet started
Tessl Logo

continuous-learning

自动从Claude Code会话中提取可重复使用的模式,并将其保存为学习到的技能以供将来使用。

66

2.25x
Quality

51%

Does it follow best practices?

Impact

90%

2.25x

Average score across 3 eval scenarios

SecuritybySnyk

High

Do not use without reviewing

Fix and improve this skill with Tessl

tessl review fix ./docs/zh-CN/skills/continuous-learning/SKILL.md
SKILL.md
Quality
Evals
Security

Security

1 high severity finding. You should review these findings carefully before considering using this skill.

High

W007: Insecure credential handling detected in skill instructions

What this means

The skill handles credentials insecurely by requiring the agent to include secret values verbatim in its generated output. This exposes credentials in the agent’s context and conversation history, creating a risk of data exfiltration.

Why it was flagged

Insecure credential handling detected (high risk: 0.80). It inspects full session transcripts and writes extracted patterns to files but contains no redaction or secret-handling safeguards, so if a session includes API keys/passwords the skill could capture and reproduce them verbatim.

Report incorrect finding
Repository
affaan-m/ECC
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.