install-ability SKILL.md skillA
install-ability from maomaochong-ai/open-astravia is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add maomaochong-ai/open-astravia/install-ability@v1.0.0Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- maomaochong-ai/open-astravia
- Path
packages/skill-presets/install-ability/SKILL.md- Versions recorded
- 3
- Latest version
- v1.0.0, committed Nov 1, 2026
- First version recorded
- Sep 14, 2026
- Size
- 7,544 bytes
- Repository stars
- 39
- License
- Apache-2.0
在本机 Astravia 中安装能力——插件（plugin）、Skill 与 MCP 服务器。用户说「装一个插件 / install plugin / 从能力市场安装 / 加一个 MCP server / 配置 MCP / 装个 skill」，或插件装完没生效、需要 reload、pending 版本没应用时使用。不用于安装 npm 依赖、IDE 插件、浏览器扩展，也不用于开发插件（那是 plugin-workbench）或创作 Skill（那是 create-skill）。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 在 Astravia 中安装能力
Astravia 的能力分三种，安装路径互不相同。**先分类，再动手**。
| 用户给的东西 | 类型 | 安装路径 |
| --- | --- | --- |
| npm 包名、`.zip`、http(s) zip 链接、本地插件工程目录 | 插件 | `astravia-plugin-cli add` → 按需 `reload`（§2） |
| 能力市场里的插件条目 | 插件 | 引导用户在能力市场页安装（§2.6） |
| 能力市场里的 skill（有 slug） | Skill | `skills.manage install-from-market`（§3） |
| 用户自己写的 / 仓库里的 SKILL.md | Skill | 交给 `create-skill` skill（§3.2） |
| `command` + `args`，或一个 MCP 的 http url | MCP | `mcp.manage upsert`（§4） |
分不清时**先问用户**，不要凭包名猜类型：npm 上的 `@modelcontextprotocol/server-*` 是 MCP，不是 Astravia 插件。
## 1. 通用前置
- **只在用户明确要求安装时执行**。当前任务缺某个工具，不构成自行安装能力的理由。
- 所有写操作都会弹宿主审批。用户拒绝就**停下并如实报告**，不要改走别的路子达成同一效果。
- **禁止直接改注册表**：`~/.astravia/plugins/`、`~/.astravia/plugins-manifest.json`、`~/.astravia/skills-manifest.json`（市场安装的部分）、`~/.astravia/agent/mcp.json` 都由宿主维护，手写会与宿主状态错位。
- 安装源来自用户。第三方 zip / http 链接在安装前把来源念给用户确认一次。
## 2. 插件
### 2.1 命令入口
```bash
npx @astravia-org/plugin-cli add <npm-package|./local.zip|https://…/x.zip|.>
npx @astravia-org/plugin-cli reload <plugin-id>
```
`.` 表示「当前插件工程」（会先 pack）。加 `--json` 便于解析结果。
npx 不可用或离线时，用系统插件「制作插件」内置的同一份 CLI：先 `plugins.query` → `{"operation":"get","id":"plugin-workbench"}` 取 `rootPath`，再
```bash
…Read the whole file at its exact version.
How to install
mdr add maomaochong-ai/open-astravia/install-ability@sha256:f4400b22f480438fThe line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_scotyzxqu7tqls36)
0 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Sep 14, 2026 and Nov 1, 2026, about one every 24 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.0.0 latest | 2026-11-01 | 5b2e970 | 7,544 B | A | view · diff |
| v1.0.0 | 2026-10-01 | 0ce1911 | 7,611 B | A | view · diff |
| v1.0.0 | 2026-09-14 | dd2e694 | 7,539 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7544 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
maomaochong-ai/open-astravia · 39 stars · license Apache-2.0 · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_scotyzxqu7tqls36 GET https://markdownregistry.com/api/v1/resolve?ref=maomaochong-ai/open-astravia/install-ability GET https://markdownregistry.com/api/v1/blob/f4400b22f480438fd896da8d935d216e5e86eca686c98dfae8998094ad31f40c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.