legal-builder-hub-auto-updater SKILL.md skillA
legal-builder-hub-auto-updater from yuandian-ailaw/agent-for-legal-cn is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add yuandian-ailaw/agent-for-legal-cn/legal-builder-hub-auto-updater@git:20260529.efece30Pins git:20260529.efece30 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- yuandian-ailaw/agent-for-legal-cn
- Path
legal-skillpack-legal-builder-hub/skills/legal-builder-hub-auto-updater/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260529.efece30, committed May 29, 2026
- Size
- 4,387 bytes
- Repository stars
- 16
- License
- a license file GitHub does not identify
检查已安装 skill 的更新：GitHub 用 commit SHA + diff；法律元力 工具包用 catalog 的 sha256/etag， 站内 skill 用详情 version/updated；均需显式批准。见 references/yuanli-api.md。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# legal-builder-hub-auto-updater
> **对用户输出一律简体中文。** skills-qa 结论档：**可安装 / 有顾虑 / 重大顾虑 / 拒绝安装**。
1. 读取 `$LEGAL_AGENT_PROFILE_HOME/legal-builder-hub/profile.md` → 已安装列表、更新偏好。
2. 读取 `install-log.yaml` 中每条记录的 `source`、`sha256`/`etag`/`version`。
3. 按来源检查更新（见下）。
4. **禁止**未阅读 diff 且未获用户明确批准即覆盖文件。
---
## 目的
社区 skill 会演进。本 skill 发现变更、展示 diff，**仅在用户明确批准后**应用。无「静默自动升级」模式。
## 信任姿态
已安装 skill 在特权法律环境中运行。上游可被篡改、易主或改变行为。**设计原则：每次更新都必须有人读过 diff 并输入批准。**
## 流程
### Step 1：检查每条已安装记录
**GitHub 来源：**
- 拉取 registry 上**当前 commit SHA**（不用 tag/branch head——可被改写）
- 与 install-log 中钉扎 SHA 对比；不同 → 有更新
**法律元力 工具包（`source: yuanli`, `type: toolkit`）：** `{BASE}` 默认 `https://yuanli.ailaw.cn`。
1. `GET {BASE}/api/toolkits/catalog`，找 `toolkits[].id`
2. 对比 install-log 的 `sha256` 或 `etag`；变化 → 有更新
3. 展示 `version`、`size_bytes`、`published_at`；**不**自动下载
4. 用户批准后：`GET {BASE}/api/toolkits/{id}/download`（可用 `If-None-Match`）→ 解压 → `python3 install.py`（installer 自动检测平台，必要时加 `--target <path>`）
5. 无 API：对比 `yuanli-toolkits.yaml` 或提示用户下载新 zip
**法律元力 站内 skill（`type: skill`）：**
- `GET {BASE}/api/skills/{skill_id}`，对比 `version` / `updated`
- 有变 → `GET .../download` 替换目录（见 yuanli-api.md §2.3）
…Read the whole file at its exact version.
How to install
mdr add yuandian-ailaw/agent-for-legal-cn/legal-builder-hub-auto-updater@sha256:1785627d266dc52fThe line at the top of this page pins the label git:20260529.efece30, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_piepc2rge3tl23xt)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on May 29, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4387 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
yuandian-ailaw/agent-for-legal-cn · 16 stars · license a license file GitHub does not identify · pushed 2026-09-10 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_piepc2rge3tl23xt GET https://markdownregistry.com/api/v1/resolve?ref=yuandian-ailaw/agent-for-legal-cn/legal-builder-hub-auto-updater GET https://markdownregistry.com/api/v1/blob/1785627d266dc52f5426a55dc01c1cc40440ec2ef6adc9c6e7577f0ae99eebdf
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.