kiwi-sourcing SKILL.md skillA
kiwi-sourcing from harrylabsj/kiwi is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add harrylabsj/kiwi/kiwi-sourcing@v1.0.3Pins v1.0.3 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- harrylabsj/kiwi
- Path
integrations/hosts/workbuddy/kiwi-sourcing/skills/kiwi-sourcing/SKILL.md- Versions recorded
- 5
- Latest version
- v1.0.3, committed Oct 30, 2026
- First version recorded
- Sep 30, 2026
- Size
- 5,426 bytes
- Repository stars
- 21
- License
- Apache-2.0
Source products, request quotes, compare offers, and negotiate non-binding terms with suppliers.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
> 本地待审候选，不代表发布或真实商家链路已验收。连接器透传全部 13 个工具，不负责用户授权、业务审批、预算或采购范围校验；这些由上层专家和 Kiwi 后端承担。连接器不证明宿主返回代表真人同意，也不自动调用 `kiwi_approve`。工具清单没有支付工具。 # Kiwi 采购询价 当用户要找供应商、询价、比价、议价，或询问交期、起订量和售后时使用本技能。Kiwi 形成的 是非绑定商业协议：不创建订单、不支付、不锁库存，也不代表用户签署具有法律约束力的合同。 ## 标准流程 1. 用 `kiwi_search` 发现候选供应商。把商品名称保持为短词，规格、预算、地区和时间要求另行整理。 2. 默认最多选择 3 家相关商家，调用 `kiwi_request_quotes`。每次写调用使用新的稳定幂等键。 3. 用 `kiwi_get_task` 查看结果。收到 `partial_success` 时保留成功报价，并明确列出失败商家。 4. 按总价、交期、MOQ、售后、币种和证据完整性比较，不只按单价排序。 5. 用户要求还价或澄清时调用 `kiwi_negotiate`，不要擅自改变预算、数量或交付底线。 6. 是否接受协议由上层专家根据任务授权和用户决策处理。只有上层专家确定已获具体协议授权后才调用 `kiwi_accept_agreement`。若 Kiwi 后端返回 `approval_required`，原样呈现其摘要/状态并按后端流程等待上层决定；不得把该返回解释为已经获批，也不得自动调用 `kiwi_approve`。只有上层专家主动发出明确的 `kiwi_approve` 工具调用时才透传该调用。 7. 用 `kiwi_get_agreement` 核对协议、摘要和 digest。 8. 只有上层专家依其授权决定需要后续入口时才调用 `kiwi_handoff`；按后端返回报告结果。连接器不会为它附加或复用审批。 参数与隐私规则见 @references/commerce-intent.md，审批规则见 @references/approval-flow.md， 异常处理见 @references/error-recovery.md。 ## 工具选择 | 工具 | 用途 | 约束 | | ----------------------- | ---------------------------- | ----------------------------------- | …
Read the whole file at its exact version.
How to install
mdr add harrylabsj/kiwi/kiwi-sourcing@sha256:8c979188e0f29a20The line at the top of this page pins the label v1.0.3, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_jkqip3yaz37agmih)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 30, 2026 and Oct 30, 2026, about one every 8 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.0.3 latest | 2026-10-30 | b7718b3 | 5,426 B | A | view · diff |
| v1.0.2 | 2026-10-07 | 3e88d80 | 4,661 B | A | view · diff |
| v1.0.1 | 2026-09-30 | 7b29604 | 4,661 B | A | view · diff |
| v1.0.1 | 2026-09-30 | baa2d8e | 4,082 B | A | view · diff |
| v1.0.0 | 2026-09-30 | 3c90b99 | 4,082 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5426 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
harrylabsj/kiwi · 21 stars · license Apache-2.0 · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_jkqip3yaz37agmih GET https://markdownregistry.com/api/v1/resolve?ref=harrylabsj/kiwi/kiwi-sourcing GET https://markdownregistry.com/api/v1/blob/8c979188e0f29a205bdaba3f7dc56db031094746a1635835fd8be7251246b43a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.