develop-disguise skillA
develop-disguise is agent-read markdown (skill) from cha0upup/leoai: 当用户希望在平台侧开发、测试、创建或更新 Disguise 时使用。该 skill 用于生成符合平台约束的 trafficEncodeBody、trafficDecodeBody、headersJson、description 和规范名称，并优先调用 testDisguise 验证 traffic 编解码是否可互逆，再创建或更新 Disguise。.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# 开发平台侧 Disguise 当用户要求开发、修改、测试、完善或保存 Disguise 时，使用这个 skill。 ## 职责边界 | 侧 | trafficEncode（出站） | trafficDecode（入站） | |---|---|---| | 平台侧 | PayloadCodec 序列化/压缩/加密，再经 trafficEncodeBody 伪装 | 先经 trafficDecodeBody 还原字节，再由 PayloadCodec 解密/解压/反序列化 | | puppet 侧 | PayloadCodec 序列化/压缩/加密，再经 trafficEncodeBody 伪装 | 先经 trafficDecodeBody 还原字节，再由 PayloadCodec 解密/解压/反序列化 | 平台侧 `trafficEncodeBody` 和 `trafficDecodeBody` 只处理不透明字节，必须与 puppet 侧协议严格匹配，且在平台侧测试逻辑下必须可互逆。 --- ## 一、核心约束 ### 1.1 方法签名（不可更改） ```java public byte[] encodeTraffic(byte[] payload) throws Exception public byte[] decodeTraffic(byte[] body) throws Exception ``` ### 1.2 互逆性 `decodeTraffic(encodeTraffic(bytes))` 必须返回与输入完全相等的任意字节序列。序列化、压缩和加密由固定 `PayloadCodec` 负责。 ### 1.3 单次保存 - 一次请求中只允许调用 **一次** `addDisguise` 或 `updateDisguise`。 - 中间草案只能存在于上下文或通过 `testDisguise` 验证，不得保存。 - 若已保存成功，后续想调整命名/headers/description，应告知用户可在同一 `disguiseId` 上更新，不要新建第二个。 - 比较多个候选时只输出草案，用户选定后保存唯一一个。 ### 1.4 测试先行 保存前 **必须** 调用 `testDisguise`。测试未通过时禁止调用 `addDisguise` / `updateDisguise`。 ### 1.5 依赖限制 - 只使用 JDK 内部类，不引入第三方库。 - 语法版本尽可能低：不使用 lambda、record、text block、switch 新语法，除非用户明确要求且确认兼容。 ### 1.6 安全与审计 …
Read the whole file at its exact version.
How to install
mdr add cha0upup/leoai/develop-disguise@git:20260820.9149adfmdr add cha0upup/leoai/develop-disguise@sha256:d575e3d16ad68555Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_me724em6cg5ny735)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260820.9149adf latest | 2026-08-20 | 9149adf | 10,580 B | A | view · diff |
| git:20260811.eedfbb7 | 2026-08-11 | eedfbb7 | 13,107 B | A | view · diff |
| git:20260803.d1bb122 | 2026-08-03 | d1bb122 | 13,269 B | A | view · diff |
| git:20260801.6c9c129 | 2026-08-01 | 6c9c129 | 13,256 B | A | view · diff |
| git:20260616.da8811e | 2026-06-16 | da8811e | 13,288 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10580 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
cha0upup/leoai · 307 stars · license GPL-3.0 · pushed 2026-09-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_me724em6cg5ny735 GET https://markdownregistry.com/api/v1/resolve?ref=cha0upup/leoai/develop-disguise GET https://markdownregistry.com/api/v1/blob/d575e3d16ad685556a8158e3a44b55e8bd242d0027fc6d5c346a784038dc69af
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.