feat: expose CNB Skills and public documentation knowledge [skip ci]

.cnb.yml

@@ -0,0 +1,16 @@
+main:
+  push:
+  - &id001
+    name: index-public-documentation
+    stages:
+    - name: Index public documentation
+      type: knowledge:update
+      options:
+        include:
+        - README*.md
+        - skills/oneclickvirt-backtrace/SKILL.md
+        - skills/oneclickvirt-backtrace/SKILL_ZH.md
+        issueSyncEnabled: false
+        ignoreProcessFailures: false
+  api_trigger_knowledge:
+  - *id001

.cnb/settings.yml

@@ -0,0 +1,12 @@
+npc:
+  roles:
+  - name: 使用说明
+    prompt: 依据当前仓库与已引入的公开文档知识库回答安装、使用和版本问题，附上文档链接。核对文档对应的版本与架构；没有依据时说明缺少的信息。仅提供说明和操作建议，不执行宿主机操作，也不请求或展示密钥及私有仓库内容。
+  defaultRepo: oneclickvirt/backtrace
+  defaultRole: 使用说明
+  button:
+    name: 使用说明
+    description: 查询公开的安装和使用文档
+  imports:
+    list:
+    - oneclickvirt/oneclickvirt.github.io

SKILL.md

@@ -0,0 +1,56 @@
+---
+name: oneclickvirt-backtrace
+description: "Query RDAP/BGP metadata for an explicit IP; distinguish lookup data from an actual traceroute."
+metadata:
+  repository: oneclickvirt/backtrace
+  integration-version: "1.0.0"
+---
+
+# backtrace
+
+## Scope
+
+Query RDAP/BGP metadata for an explicit IP; distinguish lookup data from an actual traceroute.
+
+- Read probe_help from the installed binary before assuming flags are supported. MCP returns native JSON when the program provides JSON, otherwise native text.
+- Keep partial/network errors distinct from confirmed test outcomes. Current release assets and their actual architecture are available through release_assets.
+- The ip-info preset requires a literal target IP. Do not pass a host, proxy, shell expression or a network range.
+
+## Install and update
+
+```bash
+curl -fL --retry 3 https://raw.githubusercontent.com/oneclickvirt/backtrace/main/scripts/install_agent.py -o install_agent.py
+python3 install_agent.py --client codex
+```
+
+The installer is also mirrored at `https://cnb.cool/oneclickvirt/backtrace/-/git/raw/main/scripts/install_agent.py`; add `--source cnb` to install from an immutable CNB snapshot (requires Git).
+
+Use `--client claude` or `--client openclaw` for another client. Download and run again to update; `--ref` pins a source tag/commit. The installer verifies all SHA-256 checksums before replacing its files, preserves extra local files/client settings, and records the source commit in `install.json`.
+
+## MCP
+
+Requires Python 3.9+. The adapter uses existing local commands and their existing permissions; it does not install a virtualization runtime. Merge the generated `mcp.codex.toml`, `mcp.claude.json`, or `mcp.openclaw.json` into that client's existing configuration. For a remote host, run its adapter over noninteractive SSH.
+
+```bash
+python3 install_agent.py --client codex --install-binary
+```
+
+`--version` selects the probe release tag; `--ref` selects Skill/MCP source independently. The default resolves the latest stable GitHub release once, selects a real asset for this OS/architecture, and verifies SHA-256. Missing assets fail without guessing. Reuse an existing executable with `--binary /absolute/path/to/program`.
+
+Call `integration_info` first for capabilities and prerequisites.
+
+Available probe presets:
+
+- `ip-info`: `backtrace -json -timeout 12s -ip <target>`
+
+`release_assets` returns the actual version, filenames, sizes, digests and download URLs. Pass an exact tag for a pinned release. After a product update, verify help and an actual call rather than treating file presence as a successful test.
+
+## Source and documentation
+
+- [`backtrace_install.sh`](https://github.com/oneclickvirt/backtrace/blob/main/backtrace_install.sh)
+- [`cmd/main.go`](https://github.com/oneclickvirt/backtrace/blob/main/cmd/main.go)
+- [`go.mod`](https://github.com/oneclickvirt/backtrace/blob/main/go.mod)
+
+- [集成安装说明 / Integration guide](https://www.spiritlhl.net/guide/agent_integrations.html)
+
+Check the relevant source and current documentation before giving commands. Preserve requested version pins, data paths and native host identifiers. Distinguish actual program execution, isolated tests and unverified environments.

SKILL_ZH.md

@@ -0,0 +1,56 @@
+---
+name: oneclickvirt-backtrace
+description: "查询指定 IP 的 RDAP/BGP 信息，区分数据库查询与真实路由探测。"
+metadata:
+  repository: oneclickvirt/backtrace
+  integration-version: "1.0.0"
+---
+
+# backtrace
+
+## 使用范围
+
+查询指定 IP 的 RDAP/BGP 信息，区分数据库查询与真实路由探测。
+
+- 先用 probe_help 核对已安装程序的实际帮助。程序支持 JSON 时返回原生 JSON，否则返回原生文本。
+- 区分部分结果、网络失败和确定结论；通过 release_assets 查询当前真实产物及架构。
+- ip-info 预设只接受单个真实 IP，不接受域名、代理、Shell 表达式或网段。
+
+## 安装和更新
+
+```bash
+curl -fL --retry 3 https://raw.githubusercontent.com/oneclickvirt/backtrace/main/scripts/install_agent.py -o install_agent.py
+python3 install_agent.py --client codex
+```
+
+可将下载地址改为 `https://cnb.cool/oneclickvirt/backtrace/-/git/raw/main/scripts/install_agent.py`，并使用 `--source cnb` 从 CNB 的固定提交安装；此模式另需 Git。
+
+用 `--client claude` 或 `--client openclaw` 选择其他客户端。重新下载并执行可更新；`--ref` 固定源码标签或提交。安装前校验全部 SHA-256，保留额外本地文件及已有客户端设置，`install.json` 记录来源提交。
+
+## MCP
+
+运行需要 Python 3.9 以上版本；MCP 使用本机已有程序及其权限，不自动安装虚拟化环境。将安装目录内对应客户端的 `mcp.codex.toml`、`mcp.claude.json` 或 `mcp.openclaw.json` 合并到已有配置。远端宿主机应通过无交互 SSH 运行该主机上的适配器。
+
+```bash
+python3 install_agent.py --client codex --install-binary
+```
+
+`--version` 可指定检测程序的正式 Release 标签，`--ref` 则指定 Skill/MCP 源码版本，两者独立。默认从 GitHub 解析一次最新正式版，选择本机系统/架构的真实产物并校验 SHA-256；没有匹配产物时停止。已有程序可用 `--binary /完整路径/程序` 复用。
+
+先调用 `integration_info` 查看能力和运行要求。
+
+可用检测预设：
+
+- `ip-info`: `backtrace -json -timeout 12s -ip <target>`
+
+`release_assets` 返回实际版本、文件名、大小、摘要及下载地址；需要固定版本时传完整标签。更新产物后应重新安装并验证帮助和实际调用，不能只因文件存在便判定可用。
+
+## 对应源码与说明
+
+- [`backtrace_install.sh`](https://github.com/oneclickvirt/backtrace/blob/main/backtrace_install.sh)
+- [`cmd/main.go`](https://github.com/oneclickvirt/backtrace/blob/main/cmd/main.go)
+- [`go.mod`](https://github.com/oneclickvirt/backtrace/blob/main/go.mod)
+
+- [集成安装说明 / Integration guide](https://www.spiritlhl.net/guide/agent_integrations.html)
+
+给出操作命令前核对这些源码文件及当前文档，保留现有版本固定、数据路径和宿主机标识。报告测试时区分真实程序执行、隔离测试及未验证的环境。