jwb-mcp-server SKILL.md skillA
jwb-mcp-server from chenxiang6663635/job-workbench is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add chenxiang6663635/job-workbench/jwb-mcp-server@v26.11.0Pins v26.11.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- chenxiang6663635/job-workbench
- Path
skills/jwb-mcp-server/SKILL.md- Versions recorded
- 6
- Latest version
- v26.11.0, committed Nov 1, 2026
- First version recorded
- Sep 20, 2026
- Size
- 4,806 bytes
- Repository stars
- 16
- License
- MIT
Use when 为求职工作台或类似的本地优先工具构建、维护 MCP server（stdio 形态）时，需要按只读优先、写入确认、越界拒绝与可测试性约定行事。English triggers：MCP server, stdio, tool design, host integration, local-first tools.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# MCP server 构建与维护（stdio 形态） 设计参照：MCP 官方规范，以及 Anthropic 的 mcp-builder 技能所倡导的工程思路。 （该仓库未声明开源许可，本文件为独立撰写，不复制其文本；思路层面的对齐是刻意的。） ## 硬性纪律（每条都对应真实事故） - **stdout 是协议通道**：诊断一律走 stderr——一个 print 就能破坏整个会话； - **越界拒绝**：宿主可能由模型代传参数——工作区解析 `realpath` 后校验在允许根 之内，越界**拒绝**而不是警告（少了这道检查等于给出任意目录的读写能力）； - **只读优先**：只读与写工具分开；写工具一律两段式（preview 拿令牌 → apply 落盘），且「必须先给用户看过」这一步**放在协议里**（令牌的一次性 / 期限 / 绑定），不靠提示词约束——模型看一遍摘要就调 apply 的成本几乎为零； - **返回规范数据**：底层工具返回 dict（可脱离 SDK 单测），序列化集中在 server 层；工具层把「拒绝」表达为 `ok:false` + 可读理由，而不是抛栈。 ## 工具设计 | 维度 | 做法 | |---|---| | 命名 | 动词_名词 + 服务前缀（如 list_applications / preview_import_applications） | | 描述 | docstring 写清三步用法：预览 → 把 diff 展示给用户 → 用户确认后 apply | | 口径 | 与 CLI / 网页端**同源**：复用领域函数，不另写判据；有意差异必须注释说明 | | 返回体 | 控制体积：列表给上限 + total；「摘要」类是完整视图的子集，不是搬家 | | 错误 | 令牌不可用 / 冲突 → ok:false + 理由（宿主能自行决定「重新预览」） | ## 可测试性（不依赖宿主） - 工具层与 SDK 分离：工具是普通函数、返回 dict——可直接单测； - 两条测试线：① 造真实工作区跑口径（数据真落盘、断言真字节；mock 掉调用等于 什么都没测）；② stdio 冒烟：真起子进程，走真通道——initialize、列出工具、 调用工具三步全走一遍； - 令牌目录在测试里挪进临时目录——不碰真实临时目录，用例之间不互相看见。 ## 分发形态 - 独立小包（**职责分层**优先——MCP 是宿主里跑的可选组件，主干是应用本体，依赖面 与发版节奏都不同）；`[project.scripts]` 提供命令入口； - **别把「依赖集互斥」当成天然的独立理由**：本包曾据此自成环境（主干兼容 Py3.8 钉 …
Read the whole file at its exact version.
How to install
mdr add chenxiang6663635/job-workbench/jwb-mcp-server@sha256:76a6b2d71b9ed96aThe line at the top of this page pins the label v26.11.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_f2cbp75d7yk3446u)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Sep 20, 2026 and Nov 1, 2026, about one every 8 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v26.11.0 latest | 2026-11-01 | c62388d | 4,806 B | A | view · diff |
| v26.10.0 | 2026-10-06 | 0f9cfd8 | 4,806 B | A | view · diff |
| v26.9.0 | 2026-09-25 | 0f7cde1 | 4,805 B | A | view · diff |
| v26.9.15 | 2026-09-23 | f4ef6f2 | 4,806 B | A | view · diff |
| git:20260921.71f9b56 | 2026-09-21 | 71f9b56 | 4,764 B | A | view · diff |
| git:20260920.0f992b1 | 2026-09-20 | 0f992b1 | 4,732 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4806 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
chenxiang6663635/job-workbench · 16 stars · license MIT · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_f2cbp75d7yk3446u GET https://markdownregistry.com/api/v1/resolve?ref=chenxiang6663635/job-workbench/jwb-mcp-server GET https://markdownregistry.com/api/v1/blob/76a6b2d71b9ed96aa13abbc60269555b9e3bb5c25caec03b5e7ab34de031f1f0
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from chenxiang6663635/job-workbench
Every file in chenxiang6663635/job-workbench