pipulate SKILL.md skillC
pipulate from pipulate/pipulate is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pipulate/pipulate/pipulate@git:20260929.c48a334Pins git:20260929.c48a334 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- C, 15 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pipulate/pipulate
- Path
.agents/skills/pipulate/SKILL.md- Versions recorded
- 3
- Latest version
- git:20260929.c48a334, committed Sep 29, 2026
- First version recorded
- Sep 29, 2026
- Size
- 7,964 bytes
- Repository stars
- 14
- License
- AGPL-3.0
Installing Pipulate, the local-first context compiler, on a machine that does not have it, without taking the keyboard away from the person who owns the machine. Use when someone asks to install, start, stop, reset or remove Pipulate, or asks what the one-line installer will do before running it. Read the installer before running it, run the copy you read, and keep every step a command the human types.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# pipulate: install it without giving up the keyboard
The skill you keep is the one you can still use when the wrapper is gone.
Every step below is a command the human types and reads before it runs, so
the person doing it learns what their machine is doing instead of watching
a spinner.
Two doors serve one installer. `https://pipulate.com/install.sh` lands the
workshop in `~/pipulate`; `https://npvg.org` serves the same script to `curl`
with its default folder stamped to `~/npvg` (a browser at that address gets a
web page instead). The lines below use the npvg door; swap the URL and the
folder name for the other.
## 1. Look before you run
~~~bash
curl -fsSL https://npvg.org | less
~~~
Nothing runs. What appears is the installer as text: a comment block that
explains the design (a ZIP download and a read-only deploy key, then
`nix develop`, which turns the folder into a git checkout that updates
itself), then `main() {`, the whole body inside that function, and a last
line that calls it. `j` moves down, `k` up, `/nix` searches, `q` quits. The
function wrapper is deliberate: a download cut off partway cannot run half
an install.
## 2. Save it, read it, run the copy you read
…Read the whole file at its exact version.
How to install
mdr add pipulate/pipulate/pipulate@sha256:403474ea15e6052dThe line at the top of this page pins the label git:20260929.c48a334, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4dfbgiplfajrcnzx)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, all committed on Sep 29, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260929.c48a334 latest | 2026-09-29 | c48a334 | 7,964 B | C | view · diff |
| git:20260929.fcf6da1 | 2026-09-29 | fcf6da1 | 7,750 B | C | view · diff |
| git:20260929.6e346e8 | 2026-09-29 | 6e346e8 | 6,694 B | C | view |
Audit of the latest version
- fail: No curl or wget piped into a shell (matched: curl -fsSL https://npvg.org | bash)
- fail: No recursive delete of root, home or parent (matched: rm -rf ~/)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7964 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
pipulate/pipulate · 14 stars · license AGPL-3.0 · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4dfbgiplfajrcnzx GET https://markdownregistry.com/api/v1/resolve?ref=pipulate/pipulate/pipulate GET https://markdownregistry.com/api/v1/blob/403474ea15e6052da48a714f60695d83fb5fa34741342f3c497d7a9961a74b52
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.