agent-toolchain SKILL.md skillA
agent-toolchain from huanmin123/ai-vibecode-superpower is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add huanmin123/ai-vibecode-superpower/agent-toolchain@git:20261106.ba19f6cPins git:20261106.ba19f6c in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- huanmin123/ai-vibecode-superpower
- Path
shared/skills/agent-toolchain/SKILL.md- Versions recorded
- 7
- Latest version
- git:20261106.ba19f6c, committed Nov 6, 2026
- First version recorded
- Sep 4, 2026
- Size
- 3,621 bytes
- Repository stars
- 39
- License
- Apache-2.0
为目标项目受控接入、升级、修复或维护 CodeGraph 与 RTK；在写入项目配置、安装受管版本、重建索引、健康检查或回滚时使用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 项目工具链接入与维护 `agent-toolchain` skill 是 CodeGraph/RTK 的项目接入和维护入口，不是日常开发分析 skill。`configure` 会在目标项目根 `AGENTS.md` 写入唯一的 `## CodeGraph 与 RTK` 受管标题，并写入 CodeGraph 的 MCP 配置。接入后，日常开发直接遵守目标项目 `AGENTS.md`，不要为普通查询或命令压缩触发本 skill。 仅在用户明确要求以下状态变更或维护时使用：项目接入、安装、升级到受支持版本、配置修复、索引初始化或修复、健康检查或回滚。不要因发现 CodeGraph/RTK 可用于当前开发任务而自行接入、升级或维护。 ## 接入与维护边界 1. 先读取目标项目根 `AGENTS.md`，确认用户授权当前写入或维护操作。只用本 skill 的平台驱动；不要运行项目内同名脚本、供应商 installer、`codegraph install`、`rtk init` 或 npm 上同名 `rtk` 包（宿主 MCP 配置由驱动统一写入）。 2. 首次接入或修复配置时先执行 `configure`。它仅在没有冲突时写入 CodeGraph 的 MCP 配置（Codex 写入 `.codex/config.toml`，ZCode 写入 `.zcode/config.json` 的 `mcp.servers`）、`/.codegraph/` 与所接入客户端目录（Codex 为 `/.codex/`，ZCode 为 `/.zcode/`）的忽略规则和一个完整的 `## CodeGraph 与 RTK` 标题；已有 MCP 配置或标题被改写、缺项或来自旧版 `## AI 工具` 注入时停止并报告，不覆盖项目规则。已有 `## CodeGraph 与 RTK` 段落不被逐字覆盖；段落不是当前版本时，让 AI 读取 `references/managed-agents-block.md`，先备份 `AGENTS.md`，再直接用编辑工具重写该段（保留项目特定补充和 `<!-- agent-toolchain-managed:v4 -->` 标记），然后重新运行 `configure`；不要用脚本替换受管段落。客户端按项目现有目录自动探测：有 `.codex/` 接入 Codex，有 `.zcode/` 接入 ZCode，两者都有则都接入。都未探测到时：交互终端由驱动询问用户选择（Codex/ZCode/Both）；非交互调用（会话代理经终端运行驱动时属于此类）必须显式传 `--client codex|zcode|both`，按当前会话宿主选择，不确定时先询问用户。 …
Read the whole file at its exact version.
How to install
mdr add huanmin123/ai-vibecode-superpower/agent-toolchain@sha256:5fcdcc6f691b7d09The line at the top of this page pins the label git:20261106.ba19f6c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_cupw6klp6ocoyc27)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 7 versions of this file, between Sep 4, 2026 and Nov 6, 2026, about one every 10 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261106.ba19f6c latest | 2026-11-06 | ba19f6c | 3,621 B | A | view · diff |
| git:20261104.becdd62 | 2026-11-04 | becdd62 | 3,266 B | A | view · diff |
| git:20261007.4f09ddd | 2026-10-07 | 4f09ddd | 3,278 B | A | view · diff |
| git:20261006.9e34a88 | 2026-10-06 | 9e34a88 | 4,076 B | A | view · diff |
| git:20261006.296f05d | 2026-10-06 | 296f05d | 3,988 B | A | view · diff |
| git:20260907.5f81ac0 | 2026-09-07 | 5f81ac0 | 3,223 B | A | view · diff |
| git:20260904.9989cef | 2026-09-04 | 9989cef | 3,144 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3621 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
huanmin123/ai-vibecode-superpower · 39 stars · license Apache-2.0 · pushed 2026-11-06 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_cupw6klp6ocoyc27 GET https://markdownregistry.com/api/v1/resolve?ref=huanmin123/ai-vibecode-superpower/agent-toolchain GET https://markdownregistry.com/api/v1/blob/5fcdcc6f691b7d09c1d233b0afa04d6970970e0c0d30e961dda132b098d5a930
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.