shortcut-signer SKILL.md skillA
shortcut-signer from ios151/scripting is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add ios151/scripting/shortcut-signer@git:20261028.40f7f57Pins git:20261028.40f7f57 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- ios151/scripting
- Path
skills/shortcut-signer/SKILL.md- Versions recorded
- 2
- Latest version
- git:20261028.40f7f57, committed Oct 28, 2026
- First version recorded
- Oct 28, 2026
- Size
- 34,453 bytes
- Repository stars
- 36
- License
- GPL-3.0
在手机本机写、检查、签名快捷指令：把未签名的 .shortcut / plist 签成可以直接导入快捷指令 App 的文件（通过已安装的「快捷指令签名」脚本，不上传到任何服务）。适用于：用户让你写一个快捷指令并且要能导入、手上有未签名的快捷指令文件、导入时提示「无法验证 / 未信任」。技能里自带一份核对过的快捷指令动作知识库，写草稿和检查草稿不需要别的东西；要签名，得先在 Scripting 里装好「快捷指令签名」脚本，并在手机上装好、信任它的证书。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 用途 让你（Scripting 里的 AI）能调用已安装的「快捷指令签名」脚本，**在用户的手机上**检查并签名快捷指令，并在聊天里交出可以直接导入的文件。 背景：iOS 15 起，没签过名的快捷指令导入不了，只能导入签过名的 `.shortcut` 文件。「快捷指令签名」脚本用它自己生成的根证书签名；用户在手机上装好并信任这张证书之后，签出来的文件就能直接导入。整个过程在手机本机完成，不上传到任何服务。 本技能负责：帮用户把需求落成快捷指令草稿（技能里自带一份动作知识库，见下面「知识库」）、本地检查草稿的结构、调用「快捷指令签名」脚本签名、读结果、告诉用户下一步。签名的密码学全在脚本里，你不需要也不应该自己实现。 本技能是**搭配「快捷指令签名」脚本用的**：写草稿和检查草稿在技能自己里完成，签名和查证书状态交给脚本。 一次完整的交付是四步，**每一步都要有证据，别越级**：写草稿 → 结构检查（`check`）→ 本地签名（`sign`）→ 用户导入并试跑。 # 知识库：写任何动作之前先查这里 快捷指令里每个动作的标识和参数键名**一个字都不能错**，写错了检查和签名都发现不了，导入后那一步就是坏的。所以技能里带了一份核对过的动作知识库，**只写它登记过的动作**： | 文件 | 内容 | |---|---| | `<skill_dir>/references/actions.md` | **先读这个**：动作索引（共 58 个）、证据标签（真机 / 样本 / 公开各代表什么、出处在哪）、按想做的事找动作 | | `<skill_dir>/references/actions-io.md` | 弹提示 / 通知 / 朗读、向用户要输入、剪贴板、分享、打开 App、运行快捷指令、链接、网络请求（含 POST）、设备信息、SSH、地图、第三方 App 的动作 | | `<skill_dir>/references/actions-text.md` | 文本、替换、正则匹配、合并、拆分、大小写、URL 编码、Base64、哈希 | | `<skill_dir>/references/actions-data.md` | 变量、列表、计数、计算、数字、日期、词典、取 / 设词典值 | | `<skill_dir>/references/actions-flow.md` | 如果（含条件码表）/ 重复 / 对每个项目重复 / 菜单、等待、备注、停止、停止并输出 | | `<skill_dir>/references/values.md` | 参数的值怎么写：常量、变量引用、带变量的文本、字典、多条件、给输出起名 | | `<skill_dir>/references/recipes.md` | 想做 X 该拿哪份模板改，怎么改 | …
Read the whole file at its exact version.
How to install
mdr add ios151/scripting/shortcut-signer@sha256:11a075ff98562f38The line at the top of this page pins the label git:20261028.40f7f57, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_hfnztdem4jsxwilr)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, all committed on Oct 28, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261028.40f7f57 latest | 2026-10-28 | 40f7f57 | 34,453 B | A | view · diff |
| git:20261028.b515c9f | 2026-10-28 | b515c9f | 33,109 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (34453 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
ios151/scripting · 36 stars · license GPL-3.0 · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_hfnztdem4jsxwilr GET https://markdownregistry.com/api/v1/resolve?ref=ios151/scripting/shortcut-signer GET https://markdownregistry.com/api/v1/blob/11a075ff98562f382feb2ee8f10dfa6f958b2b8030ecf89b417fff5df66302eb
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.