Repository navigation
Conversation
新增纯前端工具，勾选 Agent 可读写目录、联网、花钱、代发、命令与凭证范围，生成本地中文 Markdown 权限清单，并提供预设、复制与下载。 Co-authored-by: chico gong <chicogong@users.noreply.github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
✅ Deploy Preview for localtools ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
让 sync 脚本识别「浏览器端实用工具」表述，使首页与 manifest 的工具数与目录一致；清单预览改用 overflow-wrap 以通过 Stylelint。 Co-authored-by: chico gong <chicogong@users.noreply.github.com>
指定目录、允许名单等条目缩进为子列表，复制和下载的清单更易读。 Co-authored-by: chico gong <chicogong@users.noreply.github.com>
将锁文件中的 brace-expansion、source-map-js、undici、fast-uri 升到已修复版本。stylelint 依赖的 braces 目前没有已发布补丁，全量 audit 只会把 stylelint 降到 7.7.0；CI 改为审计生产依赖。 Co-authored-by: chico gong <chicogong@users.noreply.github.com>
安全门禁是否改为 --omit=dev 由仓库所有者决定，不属于本工具任务。 Co-authored-by: chico gong <chicogong@users.noreply.github.com>
锁文件升级已单独放到 cursor/npm-audit-transitive-bumps-7051，不与工具页混在同一审查范围。 Co-authored-by: chico gong <chicogong@users.noreply.github.com>
去掉 Google Fonts；只读调研默认禁止联网；导出区写明 JSON/Markdown 不是 MXC 或任何厂商的官方配置格式。 Co-authored-by: chico gong <chicogong@users.noreply.github.com>
Co-authored-by: chico gong <chicogong@users.noreply.github.com>
This was referenced Oct 20, 2026
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
描述 / Description
新增纯前端单页工具「Agent 权限清单生成器」：勾选 AI Agent 允许读写的目录、网络、花钱、代发消息、运行命令与使用凭证等范围，生成本地中文 Markdown 权限清单，可复制或下载（
.md/.json）。提供 3 个预设：只读调研（默认禁止联网）、本地编码助手、可代办但须确认。页面不请求外部字体或接口。导出的 JSON/Markdown 不是 MXC 或任何厂商产品的官方配置格式，只是给人阅读的清单。
传递依赖升级已从本 PR 移除，见独立草稿 PR #240（需所有者审批）。本 PR 没有改 CI。
验证 / Validation
本地已运行：
npm run sync:toolsnpm run buildnpm test（74 通过）npm run lintnpm run format:check浏览器：
已知 CI 失败
lint 变红是因为锁文件里的已知漏洞，和 master 一样；其中 braces 还没有上游补丁，其余的在 #240 修（https://github.com/chicogong/html-tools/pull/240）。审计没有放松。推 master、公开上线和 #240 都等 chico 批。
检查清单 / Checklist
npm run build && npm test && npm run lint && npm run format:check。git diff/git status --short，差异只包含本 PR 预期改动。tools.json并运行了npm run sync:tools。npm run test:e2e或说明手动浏览器验证。