custom-connector SKILL.md skillA
custom-connector from geekfujiwara/codeappsdevelopmentstandard is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add geekfujiwara/codeappsdevelopmentstandard/custom-connector@git:20261019.d75ad2dPins git:20261019.d75ad2d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- geekfujiwara/codeappsdevelopmentstandard
- Path
.github/skills/custom-connector/SKILL.md- Versions recorded
- 4
- Latest version
- git:20261019.d75ad2d, committed Oct 19, 2026
- First version recorded
- Oct 1, 2026
- Size
- 12,552 bytes
- Repository stars
- 78
- License
- MIT
Entra ID（OAuth 認可コード）で保護された自前の API を、Power Platform のカスタム コネクタとして作成し、on-behalf-of ログインで接続の作成・接続参照へのバインド・操作の呼び出し確認・Code Apps へのデータソース追加までブラウザ操作なしで進める。公開 API の無い接続作成は、画面の要求を観測した非公開 API（plan → hash 承認 → apply → read-back）で行う。on-behalf-of を使えない場合のブラウザ同意・利用者による手動作成も用意する。Code Apps の CSP で直接読めない公開サイト・公開 API は、認証なし・ホスト固定・GET だけのコネクタ（public-site テンプレート）で読む。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# カスタム コネクタ作成スキル 自前の API（Azure Functions 等。Entra ID で保護）を、Code Apps・Power Automate・Copilot Studio から **利用者本人の権限で**呼べるカスタム コネクタにする。正常系は**ブラウザ操作なし**で、コネクタ作成から 接続・接続参照・API 呼び出しの確認まで終わる（on-behalf-of ログイン）。 ``` Entra API アプリ（スコープ公開 + Graph User.Read + シークレット + Azure API Connections の事前承認） └─ カスタム コネクタ（OpenAPI + OAuth: aad + on-behalf-of）── 接続（利用者ごと）── 接続参照 ── Code Apps のデータソース ``` | 段階 | 方法 | 公開 API | |---|---|---| | コネクタの作成・更新 | `pac connector create / update` + ランタイム側の読み戻し | あり | | 接続の作成（on-behalf-of） | 画面の要求を観測した Power Platform API（`createoboconnection`） | **無い**（[観測 contract](references/connection-api-contract.md)） | | 接続参照のバインド | Dataverse Web API | あり | | 操作の呼び出し確認 | コネクタのランタイム URL（Code Apps を介さない） | あり | | データソース追加 | `pa app add data-source` | あり | リファレンス: [観測 contract](references/connection-api-contract.md) / [異常系・ブラウザで作る方法](references/troubleshooting.md) / [公開サイト（認証なし）](references/public-site.md) / [パラメータ](references/.env.example) ## Step 0: 事前確認（会話の最初に 1 回だけ） [standard の共通契約](../standard/SKILL.md#共通の事前確認契約会話の最初に-1-回だけ)に加え、1 回の AskUserQuestion で確認する。 | # | 質問 | 合格条件 | |---|---|---| …
Read the whole file at its exact version.
How to install
mdr add geekfujiwara/codeappsdevelopmentstandard/custom-connector@sha256:6196aec623073f73The line at the top of this page pins the label git:20261019.d75ad2d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_t3jn6g43yaeezi5x)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Oct 1, 2026 and Oct 19, 2026, about one every 6 days. Its first recorded version is graded B and its latest A.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261019.d75ad2d latest | 2026-10-19 | d75ad2d | 12,552 B | A | view · diff |
| git:20261005.1fe3b1d | 2026-10-05 | 1fe3b1d | 12,391 B | A | view · diff |
| git:20261001.f0cbc17 | 2026-10-01 | f0cbc17 | 11,292 B | A | view · diff |
| git:20261001.5f7681a | 2026-10-01 | 5f7681a | 9,365 B | B | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (12552 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
geekfujiwara/codeappsdevelopmentstandard · 78 stars · license MIT · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_t3jn6g43yaeezi5x GET https://markdownregistry.com/api/v1/resolve?ref=geekfujiwara/codeappsdevelopmentstandard/custom-connector GET https://markdownregistry.com/api/v1/blob/6196aec623073f734e7faba64420c7c1584c9ae3ee14d34658eb1e99910755cf
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.