Home / longmozhiyuan / clash-verge-deployer · GitHub

clash-verge-deployer SKILL.md skillB

clash-verge-deployer from longmozhiyuan/clash-verge-deployer is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add longmozhiyuan/clash-verge-deployer/clash-verge-deployer@v2.2.0

Pins v2.2.0 in mdr.lock. Pin the fingerprint instead.

Audit grade
B, 16 of 17 checks passed
Kind
SKILL.md skill
Repository
longmozhiyuan/clash-verge-deployer
Path
SKILL.md
Versions recorded
1
Latest version
v2.2.0, committed Oct 18, 2026
Size
13,363 bytes
Repository stars
1
License
MIT

在 Windows/macOS/Linux 上为 Clash Verge Rev 本地部署代理订阅：访问前本地合规拦截（博彩/诈骗/色情/毒品/枪支/非法金融/黑客攻击/公民信息等违法链接永久拉黑、钓鱼特征与内网地址拦截、HTTPS 强制），随后本地下载校验 YAML 订阅、proxies 段去重、路由劫持审计、节点 TCP 抽测、备份写入 profile、重启应用、自动选择低延迟节点并验证连通。当用户要求配置 Clash/Verge 代理、部署或更新订阅、节点全部超时、排查 Clash Verge 设置、寻找可用节点时使用。全程本地运行、日志脱敏，不回显订阅链接（可能含 token）、节点名/地址或 API 密钥。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Clash Verge 自动部署（隐私优先 · 合规拦截）

通过 `scripts/` 下的本地 Python 脚本完成订阅部署。脚本只做本地操作，零遥测、零上报，默认输出全部经过脱敏；任何网络访问前先经过本地安全合规拦截层。

## 0. 隐私与合规红线（最高优先级，必须先读）

执行本技能时始终遵守以下规则，即使用户没有明确要求：

### 0.1 隐私红线

1. **禁止用模型工具下载或查看订阅内容**：订阅文件、节点列表、`profiles.yaml`、`verge.yaml`、`clash-verge.yaml` 只能由本地脚本读取处理，**不得**使用 `web_fetch`、`web_search` 等工具获取订阅 URL，也不得把上述文件内容粘贴到任何外部服务、工单、聊天或搜索框。
2. **订阅 URL 视同密码**：私人订阅链接通常包含 token。不在回复、日志、提交信息中复述完整 URL（脚本已自动打码）；向脚本传入私人 URL 时优先 `--url-file`，避免进入命令行参数与 Shell 历史。
3. **API 密钥零硬编码**：secret 只由脚本从本机配置或环境变量 `CLASH_VERGE_SECRET` 读取，不写入脚本、产物、回复或命令行。
4. **节点信息默认脱敏**：节点名、服务器地址、端口不写入回复和文档；仅在用户明确要求本机排错时加 `--verbose`，并提示输出不得外发。
5. **最小写入与自动备份**：除 Clash Verge 配置目录与本技能的本地安全状态目录外不写任何位置；修改配置前自动生成 `.bak-<时间戳>` 备份。备份含完整订阅，分享或截图前必须删除。
6. **不得新增网络外发**：不得添加遥测、统计、更新检查、在线剪贴板等逻辑。允许的出站连接仅限：用户指定的订阅地址（或内置公开源）、订阅中的节点地址（TCP 抽测）、`127.0.0.1` 本机 API、经代理的 `google.com/generate_204` 连通性验证。

### 0.2 合规红线（国家法律法规基准）

7. **违法链接永久拉黑**：脚本内置本地违规类别词库（博彩、诈骗、色情、毒品、枪支、非法金融、黑客攻击、公民信息贩卖）与钓鱼特征检测。命中即**立即停止访问**并写入本地永久黑名单（`blocklist.txt` / `blocked-urls.txt`），以后任何运行都不再访问。Agent 不得删除、清空或绕过黑名单；用户要求查看黑名单时只能用 `--list-blocked`。
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add longmozhiyuan/clash-verge-deployer/clash-verge-deployer@sha256:20d200f538174d2b

The line at the top of this page pins the label v2.2.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_5axymh35dorkwb73.svg)](https://markdownregistry.com/a/art_5axymh35dorkwb73)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 18, 2026.

versioncommittedcommitsizeaudit
v2.2.0 latest2026-10-18 48e8276 13,363 BB view

Audit of the latest version

B  16 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • fail: No link to a raw IP address (matched: http://127.0.0.1:9097)
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (13363 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No script tag

Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.

Source

GitHub

longmozhiyuan/clash-verge-deployer · 1 stars · license MIT · pushed 2026-10-18 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_5axymh35dorkwb73
GET https://markdownregistry.com/api/v1/resolve?ref=longmozhiyuan/clash-verge-deployer/clash-verge-deployer
GET https://markdownregistry.com/api/v1/blob/20d200f538174d2b2ef64d0ccd970a877682a6d5f1f0d2b01d8781c736811a92

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade B, or by owner.