app-flow-delivery SKILL.md skillA
app-flow-delivery from wangjs-jacky/jacky-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add wangjs-jacky/jacky-skills/app-flow-delivery@git:20260718.a77c28bPins git:20260718.a77c28b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- wangjs-jacky/jacky-skills
- Path
labs/app-flow/app-flow-delivery/SKILL.md- Versions recorded
- 3
- Latest version
- git:20260718.a77c28b, committed Jul 18, 2026
- First version recorded
- Jul 12, 2026
- Size
- 4,900 bytes
- Repository stars
- 15
- License
- MIT
在需要打包、签名、OTA、APK/IPA、GitHub Release、商店提交、部署、回滚或验活时使用；支持独立窄任务，也支持作为 app-flow 的当前行动。它核对具体渠道授权，可复用用户明确记录的项目级 preview OTA 持续授权并在验证通过后自动发布；未获授权只做预检。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# App Flow Delivery 把已构建、已验证的产物按具体渠道交付出去，并对交付本身负责。交付边界由目标仓库与渠道现场决定，不预设某种技术栈或发布方式。 ## 授权是第一约束 - 打包、签名、OTA、APK/IPA、Release、商店提交、部署、回滚都属于外部副作用，执行前都要核对当前渠道与动作是否已获用户明确授权。 - 对低风险、可逆的 preview OTA，可复用用户明确授予的**项目级持续授权**。把仓库范围、preview 通道、允许动作与撤销条件写入本 Skill 的 `local/`；授权有效且自动化检查通过后直接自动发布，**不再逐次确认**或提醒用户发布。 - 持续授权只覆盖记录中的项目与 preview 通道。目标仓库或通道变化、原生变化需要重新构建、凭据/回滚条件异常，或用户撤销自动发布时，停止真实发布并报告实际状态。 - 长时间执行或无人值守只延长持续性，**从不**自动获得 push、Release、部署或商店提交授权。 - 未获授权时只做 dry-run 预检并把结果交接给用户，不执行任何真实发布。 - production / 正式 OTA、商店提交、付费、不可逆或公开动作不受 preview 持续授权覆盖，即使有历史授权也先确认当次意图。 ## 交付前预检 0. **先读项目 / 本机的具体交付经验，别裸跑自造流程**：本 skill 的 references 只给通用边界，不含具体命令。动手打包 / 发布前，先查当前项目仓库（`AGENTS.md` / `CLAUDE.md` / 脚本）和宿主的 experience 类 skill 的 `local/`——那里往往有本机验证过的精确命令、易漏参数与渠道配置（如「只打 arm64 架构」「发到版本化 Release」「走代理」等）。历史教训：跳过这一步裸跑本地构建，漏了关键参数、打出臃肿包、也漏了规范发布通道。 1. **产物核对**：版本号、内部构建号、包标识、签名、权限、runtime 是否与目标渠道一致且单调递增。 2. **通道匹配**：产物走的更新/分发通道是否与目标渠道（内测/正式/OTA）一致，避免开发产物流入正式。 3. **回滚预案**：能否快速回滚到上一稳定产物；回滚路径本身是否已验证。 4. **上游就绪**：基础代码问题、必要的静态检查与回归是否已由构建/评审完成——交付不修基础问题，发现缺陷退回对应能力。 5. **验活方式**：发布后如何确认真实生效（可安装、可启动、关键路径可用），而不是只看渠道返回成功。 ## 参考知识 按当前交付形态选一个读取，不预先展开： …
Read the whole file at its exact version.
How to install
mdr add wangjs-jacky/jacky-skills/app-flow-delivery@sha256:239ed62f52b48de8The line at the top of this page pins the label git:20260718.a77c28b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_n5eufai42z7lpip7)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Jul 12, 2026 and Jul 18, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260718.a77c28b latest | 2026-07-18 | a77c28b | 4,900 B | A | view · diff |
| git:20260712.310601d | 2026-07-12 | 310601d | 4,320 B | A | view · diff |
| git:20260712.a80fab3 | 2026-07-12 | a80fab3 | 3,754 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4900 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
wangjs-jacky/jacky-skills · 15 stars · license MIT · pushed 2026-10-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_n5eufai42z7lpip7 GET https://markdownregistry.com/api/v1/resolve?ref=wangjs-jacky/jacky-skills/app-flow-delivery GET https://markdownregistry.com/api/v1/blob/239ed62f52b48de881e165d2ef9e8ac6e942a33c9eaf67ddd3e0cc8957379dde
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.