oryxos-init SKILL.md skillA
oryxos-init from oryx-labs/oryxos is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add oryx-labs/oryxos/oryxos-init@git:20260630.bf2f1ffPins git:20260630.bf2f1ff in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- oryx-labs/oryxos
- Path
.claude/skills/oryxos-init/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260630.bf2f1ff, committed Jun 30, 2026
- Size
- 9,067 bytes
- Repository stars
- 206
- License
- Apache-2.0
初始化 OryxOS（或同类 JDK 21 + Spring Boot 3.x 企业级单体）的工程地基：Maven 多模块骨架、 结构化日志、Actuator + Prometheus 监控、Spring MVC + 虚拟线程、springdoc OpenAPI、 统一响应体与全局异常/错误码、Google 格式 + 阿里编码规约（Spotless + 阿里 P3C + Checkstyle）、 代码安全检查（SpotBugs + Find Security Bugs + PMD + OWASP Dependency-Check），以及 CI 与 pre-commit。 当用户要「初始化项目 / 搭工程骨架 / 起脚手架 / 加日志监控 / 加开发规范 / 加代码安全检查」时使用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# OryxOS 项目初始化 Skill
把"工程地基"一次性、标准化地装好——业务逻辑（五大核心能力）不在本 skill 范围内。
## 什么时候用
- 新建 OryxOS 仓库、或给空仓库起工程骨架时
- 要给项目补齐日志 / 监控 / API 规范 / 开发规范 / 安全检查时
- 任何 JDK 21 + Spring Boot 3.x 的企业级单体，想一次到位地装好工程地基时
## 不做什么（边界）
- 不实现五大核心能力（Provider / ReAct / Memory / Tool / Web）——那是业务模块，走 Spec-Kit 的 user story 拆解
- 不硬编码任何密钥 / token / API key——一律用环境变量占位（`${ENV_VAR}`）
- 不替换已存在的业务代码；只新增基础设施与配置
## 前置约定（来自 OryxOS constitution）
实施前确认这些硬约束，写进配置：
- JDK 21、Spring Boot 3.x、Maven 多模块、单二进制（fat JAR）部署
- HTTP 层用 Spring MVC + Java 21 虚拟线程（不引入响应式）
- 持久化 SQLite + Spring Data JPA；长期记忆走 MEMORY.md（本 skill 只配数据源，不建业务表）
- 审计表 `tool_invocations` / `llm_calls` 的建表脚本预留位（day one 落库）
- 代码必须过 Google 格式 + 阿里编码规约 + 安全扫描，才能合并
---
## 初始化步骤（按顺序执行，每步完成后 `git commit`）
### 0. 确认参数
向用户确认：`groupId`、根 `artifactId`、模块清单（默认 OryxOS 9 模块）、端口（默认 8080）、JDK（21）。
### 1. Maven 多模块骨架
建父 `pom.xml`（packaging=pom，统一版本管理）+ 9 个子模块：
`oryxos-core`、`oryxos-provider`、`oryxos-memory`、`oryxos-tool`、`oryxos-web`、
`oryxos-storage`、`oryxos-boot`、`oryxos-cli`、`oryxos-channel-cli`。
`oryxos-boot` 为启动模块（含 `main`），打 fat JAR。
### 2. 基础依赖与版本管理（父 pom `dependencyManagement` / `pluginManagement`）
…Read the whole file at its exact version.
How to install
mdr add oryx-labs/oryxos/oryxos-init@sha256:17ed28dae29a8174The line at the top of this page pins the label git:20260630.bf2f1ff, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ed3xgdihn4kor74b)
6 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jun 30, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9067 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
oryx-labs/oryxos · 206 stars · license Apache-2.0 · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ed3xgdihn4kor74b GET https://markdownregistry.com/api/v1/resolve?ref=oryx-labs/oryxos/oryxos-init GET https://markdownregistry.com/api/v1/blob/17ed28dae29a81745f12ee38d0ea07667020734ca85bef3afb9e5c46fda6864b
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.