Skip to content

feat(skills): add sangfor-edr-use and sangfor-xdr-use skills#277

Merged
xiami762 merged 1 commit into
devfrom
feat/sangfor-skills-migration
May 15, 2026
Merged

feat(skills): add sangfor-edr-use and sangfor-xdr-use skills#277
xiami762 merged 1 commit into
devfrom
feat/sangfor-skills-migration

Conversation

@duguwanglong
Copy link
Copy Markdown
Contributor

feat(skills): add sangfor-edr-use and sangfor-xdr-use skills

Move sangfor-edr-use and sangfor-xdr-use from docs/ into the standard
skills directory (.flocks/plugins/skills/).

Changes made during review:

  • edr: remove incorrect API mode section; EDR has no open API,
    all operations must go through browser/CDP
  • xdr: fix wrong script name in pitfalls table (cdp_fetch.py ->
    fetch_xdr_system_state.py)
  • xdr: fix API vs CDP comparison table — system state row had CDP
    script listed under API column, now shows ❌
  • xdr: fix ambiguous "request confirmation" wording; now clearly
    states API is default and fallback to browser only on failure
  • both: replace hardcoded Windows absolute paths in execution examples
    with cross-platform placeholders (<FLOCKS_VENV> / <FLOCKS_PLUGINS>),
    and add macOS/Linux parallel examples
  • both: use tempfile.gettempdir() for daemon port file path instead of
    hardcoded C:/Users/Administrator/AppData/Local/Temp
  • both: add macOS/Linux Chrome/Edge remote debugging start commands
  • xdr: rename dict key data接入 -> data_ingestion to avoid mixed
    Chinese/English key names
  • both: move inline import re to module top level

Move sangfor-edr-use and sangfor-xdr-use from docs/ into the standard
skills directory (.flocks/plugins/skills/).

Changes made during review:

- edr: remove incorrect API mode section; EDR has no open API,
  all operations must go through browser/CDP
- xdr: fix wrong script name in pitfalls table (cdp_fetch.py ->
  fetch_xdr_system_state.py)
- xdr: fix API vs CDP comparison table — system state row had CDP
  script listed under API column, now shows ❌
- xdr: fix ambiguous "request confirmation" wording; now clearly
  states API is default and fallback to browser only on failure
- both: replace hardcoded Windows absolute paths in execution examples
  with cross-platform placeholders (<FLOCKS_VENV> / <FLOCKS_PLUGINS>),
  and add macOS/Linux parallel examples
- both: use tempfile.gettempdir() for daemon port file path instead of
  hardcoded C:/Users/Administrator/AppData/Local/Temp
- both: add macOS/Linux Chrome/Edge remote debugging start commands
- xdr: rename dict key data接入 -> data_ingestion to avoid mixed
  Chinese/English key names
- both: move inline `import re` to module top level

Co-authored-by: Cursor <cursoragent@cursor.com>
@xiami762 xiami762 merged commit fbd3c70 into dev May 15, 2026
duguwanglong pushed a commit to DearEmma/flocks that referenced this pull request May 18, 2026
…ls-migration

feat(skills): add sangfor-edr-use and sangfor-xdr-use skills
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants