xyq-skill SKILL.md skillA
xyq-skill from pippit-dev/cli is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pippit-dev/cli/xyq-skill@git:20261103.79afadfPins git:20261103.79afadf in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pippit-dev/cli
- Path
skills/xyq-nest-skill/SKILL.md- Versions recorded
- 9
- Latest version
- git:20261103.79afadf, committed Nov 3, 2026
- First version recorded
- Oct 12, 2026
- Size
- 12,167 bytes
- Repository stars
- 23
- License
- MIT
使用小云雀 pippit-tool-cli 上传本地素材或通过 URL 导入素材，生成或编辑图片、生成视频、超分和擦字幕，查询结果并交付媒体；操作小云雀个人或团队 Canvas 画布、节点、布局、连线、角色/场景、生成提示词、3D 导演台与多轨草稿；查询积分及管理授权。用户提到小云雀、xyq 并需要这些操作时使用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 小云雀媒体创作与画布操作
通过 CLI 完成素材上传或 URL 导入、生成、处理、结果下载与媒体交付。支持下表中的操作；不提供多轮会话续写或自动拆分剧本、分镜并编排成片的能力。复杂需求先确认能由所列命令完成的具体操作，不承诺未覆盖的流程。
## 开始执行
1. 画布任务运行 `node "{baseDir}/scripts/ensure-cli.js" --canvas`，其他任务运行 `node "{baseDir}/scripts/ensure-cli.js"`。保存返回的 `cli_path`；Canvas 还需保存 `canvas_entry`。文档中的 `pippit-tool-cli` 替换为带引号的 `cli_path`；画布语义命令按模块说明通过 Node 入口执行。同一任务复用，安装细节见 [安装说明](scripts/install.md)。
2. 按下表选择操作，只读取命中的命令文档。执行需要鉴权的操作前，按 [授权说明](commands/auth.md) 检查登录；有效登录可复用。
3. 生成、视频处理和查询已有媒体结果时，还必须读取 [异步结果与媒体交付](workflows/async-delivery.md)。画布任务使用 [画布查询、编辑与验证](workflows/canvas-edit.md)，不把画布编辑当作媒体生成。素材上传或导入保存返回的资产 ID 与空间；积分与授权操作直接返回结果，不套用生成任务轮询。
参数是否存在、命令语法以当前 `cli_path` 对应的 `--help` 为准；返回字段和成功判断按命令文档及真实响应核对。文档与实际不一致时说明差异，不猜参数、不绕过 CLI 自行调用 HTTP。
## Space Selection
业务命令支持个人和团队空间，复用同一个 CLI 登录凭据。执行前先检查 `pippit-tool-cli space --help` 和业务命令的 `--team-id`；旧版不支持时先更新 CLI，不能忽略团队选择后继续收费操作。
- `space list` 统一输出 JSON，列出个人和当前账号的团队；顶层 `current` 表示已保存的默认空间，列表项 `current: true` 标记当前选择，无法识别本地账号时顶层为 `null`。`team_id` 保留字符串，`0` 为个人。列表中的团队不代表有生成权限、有效订阅或可用积分，最终由服务端判断。
…Read the whole file at its exact version.
How to install
mdr add pippit-dev/cli/xyq-skill@sha256:18eb66364f3ee2d6The line at the top of this page pins the label git:20261103.79afadf, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_qjuqhljnbjskeoau)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 9 versions of this file, between Oct 12, 2026 and Nov 3, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261103.79afadf latest | 2026-11-03 | 79afadf | 12,167 B | A | view · diff |
| git:20261103.eaac426 | 2026-11-03 | eaac426 | 12,236 B | A | view · diff |
| git:20261026.2033932 | 2026-10-26 | 2033932 | 12,044 B | A | view · diff |
| git:20261026.f32656c | 2026-10-26 | f32656c | 11,880 B | A | view · diff |
| git:20261021.256ab3d | 2026-10-21 | 256ab3d | 11,355 B | A | view · diff |
| git:20261021.f4d328b | 2026-10-21 | f4d328b | 11,354 B | A | view · diff |
| git:20261021.18f93dd | 2026-10-21 | 18f93dd | 10,937 B | A | view · diff |
| git:20261020.cd01ce9 | 2026-10-20 | cd01ce9 | 10,186 B | A | view · diff |
| git:20261012.3e1f59c | 2026-10-12 | 3e1f59c | 10,173 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (12167 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pippit-dev/cli · 23 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_qjuqhljnbjskeoau GET https://markdownregistry.com/api/v1/resolve?ref=pippit-dev/cli/xyq-skill GET https://markdownregistry.com/api/v1/blob/18eb66364f3ee2d67b803a1abc1739b463bbe9c26a7c55fa59a95d55b21d6d15
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.