yida-plugin-lifecycle SKILL.md skillA
yida-plugin-lifecycle from openyida/openyida is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add openyida/openyida/yida-plugin-lifecycle@git:20261028.acf18ccPins git:20261028.acf18cc in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- openyida/openyida
- Path
yida-skills/skills/yida-plugin-lifecycle/SKILL.md- Versions recorded
- 5
- Latest version
- git:20261028.acf18cc, committed Oct 28, 2026
- First version recorded
- Oct 20, 2026
- Size
- 9,719 bytes
- Repository stars
- 231
- License
- MIT
管理宜搭平台“插件管理”中的开发插件、版本配置、安装状态与运行时注册查询；前端构建、托管与加载排查交给 yida-plugin-frontend-deploy。仅在用户明确指向宜搭平台插件时使用；npm 包、Codex/AI 工具插件、连接器本身或普通页面组件不触发。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 宜搭平台插件开发、管理与使用
本技能处理宜搭平台管理后台的“插件管理”，不是 npm、浏览器扩展或 AI 工具插件。开始前核对登录组织；插件操作是组织级影响，不能借应用级授权推定组织级写权限。
连接类组件的服务、输入输出映射、参数与鉴权设计，先读[宜搭插件开发规范](./references/development-guide.md)。前端构建、托管或加载排查时，通过 `use_skill("yida-plugin-frontend-deploy", "构建、托管或排查插件前端资源")` 加载部署技能；本技能接收其真实资源地址并负责平台配置保存。CLI 生命周期接口不能替代官方编辑器中的组件设计和组织内真实测试。
## 没有开发插件权限时
- 当前组织没有“开发插件”入口，或操作明确提示未开通插件开发权限时，先核对登录账号与目标组织；空列表或登录失效不能直接判定为没有权限。
- 确认未开通后，直接提供申请入口：[宜搭开放－插件需求共创](https://ding.aliwork.com/o/Plug-in)。有页面打开能力时主动打开该页面，优先使用用户指定的 OpenYida 页面打开入口；无法打开时提供可点击链接。
- 引导用户在“共创类型”中选择“我想成为插件开发者，开发插件”，填写联系人、组织信息和拟开发插件的业务场景，由用户核对并提交。页面说明提交后由宜搭团队联系沟通，不承诺审批时效或自动开通。
- 权限开通后，在目标组织的“平台管理 → 插件管理 → 开发插件”核对入口并继续原任务。用户已经开通时无需重复申请；不能用直达开发页或 CLI 写入来绕过明确的权限限制。
- 开发者准入与前端资源托管分别核实，不宣称申请通过就自动获得 `g.alicdn.com` 上传权限，也不把该申请表所在组织当成用户必须加入的开发组织。
## 先判断证据层级
插件可用性分为四层，必须分别陈述，不能互相替代：
1. **持久化配置**：`get` / `version-get` 能回读开发插件与版本配置。
2. **静态资源可访问**：版本中的前端入口可由目标网络请求成功；仅有 CDN 字段不算资源可访问。
3. **运行时注册候选可见**：`runtime-list --extensions ...` 返回当前组织匹配扩展点的候选项，其中包含 `isEnabled=n` 的停用项；必须另外检查启用态。返回候选不等于某个页面已消费。
4. **消费者真实执行**：在实际表单、页面、门户或流程宿主里看到插件被加载并完成目标交互。只有这一层能证明最终运行效果。
## 只读查询
```bash
openyida plugin dev-list --search '插件名' --json
…Read the whole file at its exact version.
How to install
mdr add openyida/openyida/yida-plugin-lifecycle@sha256:6d33a058f71a8935The line at the top of this page pins the label git:20261028.acf18cc, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_fxytfvvo4pyi5bgc)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Oct 20, 2026 and Oct 28, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261028.acf18cc latest | 2026-10-28 | acf18cc | 9,719 B | A | view · diff |
| git:20261028.f244ab1 | 2026-10-28 | f244ab1 | 8,797 B | A | view · diff |
| git:20261021.57ed9ed | 2026-10-21 | 57ed9ed | 8,725 B | A | view · diff |
| git:20261021.6a6ef31 | 2026-10-21 | 6a6ef31 | 11,499 B | B | view · diff |
| git:20261020.90deef5 | 2026-10-20 | 90deef5 | 7,519 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9719 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
openyida/openyida · 231 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_fxytfvvo4pyi5bgc GET https://markdownregistry.com/api/v1/resolve?ref=openyida/openyida/yida-plugin-lifecycle GET https://markdownregistry.com/api/v1/blob/6d33a058f71a89350851cb2d4fc94cc158e04b9e04c33801f79981ea36be6e1b
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.