dbx-plugin SKILL.md skillB
dbx-plugin from eryajf/dbx-plugin-skill is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add eryajf/dbx-plugin-skill/dbx-plugin@git:20261029.6e8d410Pins git:20261029.6e8d410 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- eryajf/dbx-plugin-skill
- Path
skill/SKILL.md- Versions recorded
- 8
- Latest version
- git:20261029.6e8d410, committed Oct 29, 2026
- First version recorded
- Sep 28, 2026
- Size
- 23,736 bytes
- Repository stars
- 10
- License
- Apache-2.0
DBX 插件开发全流程。Use when 创建、开发、调试、打包、签名、发布或上架 DBX 插件；处理 manifest.json、dbx-plugin.toml、.dbxp 包、贡献点（connection-provider / proxy_route / workbench / filesystem-provider / context-menu / result-view / command / menus / mcp）、Host API（window.dbxPlugin 桥接）、Redis 值解码器（redis-value-codec-v1）、Rust/Go Sidecar 协议、dbx-plugin CLI（create / dev / package / keygen）、dbx-store 候选 PR 与 catalog 校验时使用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# DBX 插件开发 本 skill 覆盖 DBX 插件的**创建 → 开发 → 调试 → 打包 → 发布 → 官方商店上架**全链路。 所有契约以 Manifest v1 + Host API 1.x + Sidecar Protocol v1 + `.dbxp` 包格式为准。 最近核验：2026-10-29，DBX `1b8dfd9673e993f65a6253c0faa0882bd49a544b`、dbx-store `f8b87d4eaced4beb53077dbf3eab46411f3a49ae`。本轮新增 MCP 外部工具的 toolsets、访问级别、连接子范围与 Marketplace `mcpTools` 标记，并扩展文件拖放回调的 iframe CSS 坐标；Store 的 Schema、脚本、Workflow 与签名规则未变。源码能力不等于已发布 CLI 或目标宿主必然支持，仍需按 reference 中的能力探测与验收要求处理。 ## 0. 先建立正确的心智模型（读之前必看） ### 0.1 四个契约各自管什么 | 契约 | 载体 | 作用 | | --- | --- | --- | | Manifest v1 | `manifest.json` | 插件身份、权限、入口、贡献点、国际化。运行时契约，**拒绝未声明字段** | | 构建配置 | `dbx-plugin.toml` | 打包包含哪些目录、是否有原生后端、dev 构建命令。**不进入插件包** | | Host API 1.x | `window.dbxPlugin` / Sidecar callback | 沙箱 UI 与 DBX 宿主通信；Host API 1.1 支持 `host/requestUserInput`，Host API 1.2 增加估算执行计划 API，Host API 1.3 增加表结构元数据和剪贴板读取，Host API 1.4 增加用户授权的只读数据查询，近期 Host API 还提供贡献点 identity、工作台标题、脱敏连接列表、桌面浮动窗口/关闭、AI 流式生成、剪贴板图片与媒体流；新增能力需运行时探测 | | Sidecar Protocol v1 | stdin/stdout JSON-RPC | 可选原生后端与 DBX 通信 | | 包格式 | `.dbxp`（ZIP 容器） | DBX 实际安装的东西 | SDK **不需要启动**：没有常驻 SDK Server。开发时只用三类工具——`dbx-plugin` CLI、Rust/Go SDK（仅原生后端链接用）、DBX 注入的 `window.dbxPlugin`。 ### 0.2 三个仓库的分工（最常见的错误来源） | 你要改的东西 | 提交到哪里 | …
Read the whole file at its exact version.
How to install
mdr add eryajf/dbx-plugin-skill/dbx-plugin@sha256:5ea5c40b16ad4800The line at the top of this page pins the label git:20261029.6e8d410, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_pwm624yjog3i2af7)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 8 versions of this file, between Sep 28, 2026 and Oct 29, 2026, about one every 4 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261029.6e8d410 latest | 2026-10-29 | 6e8d410 | 23,736 B | B | view · diff |
| git:20261024.e232058 | 2026-10-24 | e232058 | 23,426 B | B | view · diff |
| git:20261023.76550f7 | 2026-10-23 | 76550f7 | 22,983 B | B | view · diff |
| git:20261019.3bf1a6c | 2026-10-19 | 3bf1a6c | 22,279 B | B | view · diff |
| git:20261008.32269e2 | 2026-10-08 | 32269e2 | 21,982 B | B | view · diff |
| git:20261003.e3c18e9 | 2026-10-03 | e3c18e9 | 21,274 B | B | view · diff |
| git:20260930.76be6b8 | 2026-09-30 | 76be6b8 | 19,916 B | B | view · diff |
| git:20260928.9b2159e | 2026-09-28 | 9b2159e | 18,775 B | B | view |
Audit of the latest version
- fail: No link to a raw IP address (matched: http://127.0.0.1:5190)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (23736 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
eryajf/dbx-plugin-skill · 10 stars · license Apache-2.0 · pushed 2026-10-29 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_pwm624yjog3i2af7 GET https://markdownregistry.com/api/v1/resolve?ref=eryajf/dbx-plugin-skill/dbx-plugin GET https://markdownregistry.com/api/v1/blob/5ea5c40b16ad4800f7289a4d26f9316623ae9a7e8db4372ee929fbef4c32e822
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.