yida-connector-safe-actions SKILL.md skillA
yida-connector-safe-actions from openyida/openyida is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add openyida/openyida/yida-connector-safe-actions@git:20260828.575c2bfPins git:20260828.575c2bf in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- openyida/openyida
- Path
yida-skills/skills/yida-connector-safe-actions/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260828.575c2bf, committed Aug 28, 2026
- First version recorded
- May 26, 2026
- Size
- 10,757 bytes
- Repository stars
- 231
- License
- MIT
从前端 API 文件或后端 Controller 代码中提取接口定义，为已有宜搭连接器生成执行动作配置；修复"测试后动作消失"问题。适用于连接器已创建、需要添加可调用的 API 操作时。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 宜搭 HTTP 连接器执行动作安全生成 ## 适用场景 当用户需要把已有系统接口接入宜搭 HTTP 连接器时使用本技能，尤其适用于： - 已有连接器，需要继续添加“执行动作” - 用户提供前端 API 文件和后端 Controller/接口定义文件 - 从 Vue/React API wrapper、ASP.NET Controller、Spring Controller 等代码中提取接口 - 点击宜搭连接器测试面板时报错，刷新后动作列表为空 - `openyida connector list-actions <connector-id>` 返回 0 个动作，但连接器仍存在 - 需要说明“如何正确使用 OpenYida 生成 HTTP 连接器动作” 如果只是创建连接器、配置鉴权、管理连接器账号，优先使用 `yida-connector`。 ## 核心原则 - 先读源码再生成动作，不要凭空编造接口路径、参数或 action-id。 - 默认只生成前端 API 文件实际暴露/调用的接口，除非用户明确要求覆盖后端全部接口。 - 对未知响应结构保持保守，先只输出根对象 `Response`，避免宜搭测试面板解析复杂输出结构时报错。 - Windows PowerShell 读取中文 JSON 时必须显式使用 UTF-8。 - 修改后必须执行“添加动作 -> 列表验证 -> CLI 测试 -> 再次列表验证”的闭环。 - 如果一次错误配置导致动作被清空，应重建完整动作列表，而不是只追加缺失动作。 - `add-action` 只追加新稳定 ID；既有动作的 Query 默认值使用显式 `update-action`，不得用整份新动作覆盖。 - 动作 JSON 必须使用当前 agent 的结构化文件写入工具创建；不要用 shell heredoc、`cat`/`echo`/`printf`/`tee` 或重定向写文件。 ## 推荐流程 ### 1. 读取接口来源 同时读取用户提供的前端 API 文件和后端接口定义文件。 前端 API 文件用于确认“哪些接口真的要暴露给宜搭连接器”；后端文件用于确认 method、route、query/path/body 参数和默认值。 ### 2. 查看连接器状态 ```bash openyida connector detail <connector-id> openyida connector list-actions <connector-id> ``` 记录以下信息： - 连接器 ID - 连接器域名、协议、基础路径、鉴权方式 - 当前已有动作列表 - 是否已经出现动作被清空 ### 3. 生成动作 JSON 文件 建议放在 OpenYida project 工作目录的任务子目录： …
Read the whole file at its exact version.
How to install
mdr add openyida/openyida/yida-connector-safe-actions@sha256:b31dfb7d2693a934The line at the top of this page pins the label git:20260828.575c2bf, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_qpls6xl7exndtc6g)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between May 26, 2026 and Aug 28, 2026, about one every 23 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260828.575c2bf latest | 2026-08-28 | 575c2bf | 10,757 B | A | view · diff |
| git:20260827.d825a5a | 2026-08-27 | d825a5a | 9,879 B | A | view · diff |
| git:20260709.6386eb3 | 2026-07-09 | 6386eb3 | 8,897 B | A | view · diff |
| git:20260702.ac3bada | 2026-07-02 | ac3bada | 8,358 B | A | view · diff |
| git:20260526.f701e8f | 2026-05-26 | f701e8f | 8,516 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10757 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
openyida/openyida · 231 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_qpls6xl7exndtc6g GET https://markdownregistry.com/api/v1/resolve?ref=openyida/openyida/yida-connector-safe-actions GET https://markdownregistry.com/api/v1/blob/b31dfb7d2693a9348871d390eec009b98f98875d72070f4e0ca7bc5b4d51fa7c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.