ima-skills SKILL.md skillA
ima-skills from pinvou/pinvou-agent is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pinvou/pinvou-agent/ima-skills@v1.1.8-pinvou2Pins v1.1.8-pinvou2 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pinvou/pinvou-agent
- Path
pinvou3-app/src-tauri/resources/common/skill-marketplace/ima-skills/SKILL.md- Versions recorded
- 4
- Latest version
- v1.1.8-pinvou2, committed Sep 20, 2026
- First version recorded
- Jul 27, 2026
- Size
- 2,884 bytes
- Repository stars
- 2,839
- License
- MIT
Tencent IMA OpenAPI skill for notes and knowledge-base operations. Use after the user connects IMA in Pinvou Plugin Center.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 腾讯 ima OpenAPI Use this skill when the user asks to search, read, create, append, import (web page import), or organize content in Tencent IMA notes or IMA knowledge bases. ## Credential Rules Pinvou stores IMA credentials in the local system credential store. The native `ima_openapi` tool reads them only when it sends a request to the fixed official endpoint. Do not ask the user to paste credentials into the chat. Do not write credentials to `~/.config/ima`, repository files, logs, notes, or artifacts. Do not probe credentials with shell commands, environment inspection, local files, or ad-hoc network requests. Never pass a host, URL, Client ID, API Key, or HTTP header as tool input. To verify access or perform any IMA operation, call `ima_openapi`. The tool is deferred by default: if `ima_openapi` is not in your tool list, activate it with `tool_search` first; if `tool_search` cannot surface it, the ima backend is unavailable this round — say so instead of improvising. If the call reports missing credentials, tell the user to connect "腾讯 ima" from the Pinvou Plugin Center. ## Module Routing Read the relevant child instruction before operating: …
Read the whole file at its exact version.
How to install
mdr add pinvou/pinvou-agent/ima-skills@sha256:a75d365f1d772110The line at the top of this page pins the label v1.1.8-pinvou2, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_cfvwdeaa3g6rjqok)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Jul 27, 2026 and Sep 20, 2026, about one every 18 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.1.8-pinvou2 latest | 2026-09-20 | 6c95405 | 2,884 B | A | view · diff |
| v1.1.8-pinvou2 | 2026-09-07 | afbe796 | 2,651 B | A | view · diff |
| v1.1.8-pinvou2 | 2026-08-21 | c75f2fb | 2,514 B | A | view · diff |
| v1.1.8-pinvou2 | 2026-07-27 | 36524e7 | 2,508 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2884 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pinvou/pinvou-agent · 2,839 stars · license MIT · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_cfvwdeaa3g6rjqok GET https://markdownregistry.com/api/v1/resolve?ref=pinvou/pinvou-agent/ima-skills GET https://markdownregistry.com/api/v1/blob/a75d365f1d7721108b75f6670263bfda6ab51e53ad99e2ea08c0f8d4f0aa6afc
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.