agent-ai-coding SKILL.md skillA
agent-ai-coding from w8123/enterpriseagentframework is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add w8123/enterpriseagentframework/agent-ai-coding@git:20261102.80c2a7aPins git:20261102.80c2a7a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- w8123/enterpriseagentframework
- Path
reachai-control-service/src/main/resources/ai-assist/skills/agent-ai-coding/SKILL.md- Versions recorded
- 3
- Latest version
- git:20261102.80c2a7a, committed Nov 2, 2026
- First version recorded
- Sep 12, 2026
- Size
- 9,476 bytes
- Repository stars
- 1,044
- License
- MIT
Create, inspect, and safely update project-scoped ReachAI Agents; edit and publish Supervisor config drafts; discover published bindable Skills; and attach or detach exact Skill versions through the Agent AI Coding REST API. Use when an AI coding tool is asked to add an Agent, configure its model or prompt, bind a Skill, remove a Skill binding, or attach a published Workflow as a Tool.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Agent AI Coding
## 适用范围
通过项目级 AI Coding 凭据完成受约束的 Agent 编排，不直接调用控制台 `/api/agents/**` 或 `/api/skills/**`，不直接写 `runtime_agent`、`runtime_agent_config_version` 或 Agent Skill 绑定表。
认证方式：每次请求都发送 `X-ReachAI-AiCoding-Key`。该 Key 只放在请求头，不得写入 URL、生成代码、日志、浏览器运行时代码或仓库文件。API Base URL 和 `projectId` 必须来自当前项目 handoff 或 `GET /api/ai-coding/projects/{projectId}/manifest`，不要猜测。
凡是 Agent 名称、描述、System Prompt、审计说明和返回给业务用户的内容，默认使用清晰的简体中文；`keySlug`、ID、枚举、路径和协议字段保持原样。
## 强制安全边界
- 只能读取或修改当前 `projectId` 与 `projectCode` 同时匹配的 Agent。
- 创建的 Agent 固定为 `visibility=PROJECT`；不能通过 AI Coding 改写项目归属、`keySlug`、可见性或内部 ID。
- 只能绑定精确的 `PUBLISHED` Skill 版本。可绑定范围为 `PUBLIC`、`SHARED`，或当前同项目的 `PROJECT` Skill；`PRIVATE` Skill 永远不可发现、不可绑定。
- AI Coding 绑定的 Skill 始终使用 `scriptPolicy=DENY`。不能申请或伪造 `SANDBOX_REVIEWED`，也不能批准脚本执行。
- AI Coding 不提供 Skill 包导入、评审、发布、撤回或删除能力。这些治理动作必须由控制台中的人完成。
- AI Coding 不发布包含远程 A2A Agent 绑定的配置；出现 `AGENT_A2A_REQUIRES_CONSOLE` 时转交控制台人工处理。
- 不提供 Agent 删除接口。停用 Agent 只能通过受约束的 identity update 设置 `enabled=false`。
- Workflow 必须先通过 Workflow AI Coding 校验并发布，再通过项目级 Workflow-as-Tool attach 接口添加。
## 标准执行循环
1. 下载本 Skill：`GET /api/ai-assist/skills/agent-ai-coding/latest.zip`。
…Read the whole file at its exact version.
How to install
mdr add w8123/enterpriseagentframework/agent-ai-coding@sha256:55c1fa4874087383The line at the top of this page pins the label git:20261102.80c2a7a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_gvdvo6ln5n3h3zoe)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Sep 12, 2026 and Nov 2, 2026, about one every 25 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261102.80c2a7a latest | 2026-11-02 | 80c2a7a | 9,476 B | A | view · diff |
| git:20261023.73121f4 | 2026-10-23 | 73121f4 | 7,876 B | A | view · diff |
| git:20260912.253bf6a | 2026-09-12 | 253bf6a | 7,886 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9476 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
w8123/enterpriseagentframework · 1,044 stars · license MIT · pushed 2026-11-07 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_gvdvo6ln5n3h3zoe GET https://markdownregistry.com/api/v1/resolve?ref=w8123/enterpriseagentframework/agent-ai-coding GET https://markdownregistry.com/api/v1/blob/55c1fa4874087383f00120ff6aa63b329472f43364a005ff3f9b63d48fcd95a3
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.