local-web-surface SKILL.md skillA
local-web-surface from adonis0123/adonis-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add adonis0123/adonis-skills/local-web-surface@v1.4.0Pins v1.4.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- adonis0123/adonis-skills
- Path
skills/local-web-surface/SKILL.md- Versions recorded
- 2
- Latest version
- v1.4.0, committed Sep 1, 2026
- First version recorded
- Aug 8, 2026
- Size
- 19,960 bytes
- Repository stars
- 4
- License
- MIT
Build or extend a persistent macOS local web surface when the request includes a stable *.localhost URL, an existing loopback daemon/gateway, login startup, or a thin .app launcher that opens or wakes a persistent local HTTP surface. Once triggered, it can add file-backed CRUD or local/public content projections without changing public publishing. Covers domain ownership, exact Host routing, explicit access/threat boundaries, safe mutations, launchd lifecycle, TDD, curl checks, and…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Local Web Surface 把一个“本地页面”交付成可长期使用的产品入口：固定 `*.localhost` URL、登录后自动可用、可选 `.app` 启动器、真实运行验收。 此 Skill 编排已有代码与系统能力，不规定前端框架。默认优先复用现有 loopback daemon；只有证据证明生命周期、权限或故障域必须隔离时，才新增监听进程。 ## 适用性门槛 请求至少要包含一个持久 surface 信号：稳定 `*.localhost` 身份、loopback daemon/gateway、登录自启、共享 listener，或为持久本地 HTTP surface 提供唤醒/打开能力的 macOS `.app` launcher。只包装 `https://...` 公网或内网页面的 `.app` 不属于本 Skill。普通 dev server 上的页面/CRUD 实现不使用本 Skill；只需打开、操作或截图现有 URL 时交给 Browser/`agent-browser`。站点扫描与修复应交给当前环境中已安装且匹配的审计流程；不要硬路由到未验证存在的 Skill。 ## 先定义可验证结果 开始前写出以下合同： ```text Local Web Surface Contract - Surface: <name> - Canonical URL: http://<name>.localhost:<port>/ - Data owner: <repo/module> - Transport owner: <existing daemon or new service> - Read boundary: <what may be displayed> - Publish boundary: <none or what may leave the machine> - Write boundary: <none or exact mutations> - Access/threat boundary: <trusted local user/processes, or exact authentication/authorization> - Launcher: <none or App name> - Done signals: <evidence selected by Change surfaces; Host/handler-only = focused tests + diff scope + curl 200/421/404> ``` 若用户已授权自主完成，可从代码和本机状态解析这些值，不重复询问。若选择会改变数据真相源、公开范围、访问/认证边界或占用未知服务端口，先停在一个决策问题上。 ## 第一性原理 …
Read the whole file at its exact version.
How to install
mdr add adonis0123/adonis-skills/local-web-surface@sha256:037ca94caebaaf9fThe line at the top of this page pins the label v1.4.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_novuvnw626z7ho2m)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Aug 8, 2026 and Sep 1, 2026, about one every 24 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.4.0 latest | 2026-09-01 | 0590e3c | 19,960 B | A | view · diff |
| v1.3.0 | 2026-08-08 | b7c2645 | 16,685 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (19960 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
adonis0123/adonis-skills · 4 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_novuvnw626z7ho2m GET https://markdownregistry.com/api/v1/resolve?ref=adonis0123/adonis-skills/local-web-surface GET https://markdownregistry.com/api/v1/blob/037ca94caebaaf9f0034ea344c0aebafe54049be7974d6d5b0630c8ef386e8df
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.