tadado-aliyun SKILL.md skillA
tadado-aliyun from hananxr/tadado is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add hananxr/tadado/tadado-aliyun@git:20260921.8e863a8Pins git:20260921.8e863a8 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- hananxr/tadado
- Path
resources/skill/tadado-aliyun/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260921.8e863a8, committed Sep 21, 2026
- First version recorded
- Sep 21, 2026
- Size
- 8,151 bytes
- Repository stars
- 37
- License
- MIT
把 Tadado2 的安装包上传到**阿里云盘**（国内下载渠道）、生成分享链接，再把链接写进 README。 触发词：阿里云、阿里云盘、国内下载、国内镜像、网盘、上传安装包、分享链接、aliyunpan、提取码。 与 `tadado-release` 的分工：那个管「从代码到 GitHub Release」，这个管「Release 之后， 让国内用户真的下得到」。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 安装包 → 阿里云盘（国内下载渠道）
## 为什么要有这一步
GitHub Releases 在国内**经常打不开**。旧版（v0.x）就吃过这个亏：`v0.1.2.1` 加了阿里云盘渠道，
`v0.1.2.3` 把「检查更新」也改成**阿里云盘优先、GitHub 备用**。Tadado2 没有联网能力、不会自己
检查更新，但**下载这一步照样会被挡住** —— 所以要有镜像。
## 工具：`aliyunpan`（第三方，不是官方）
阿里云盘**没有官方 API**，官方客户端也不提供命令行。能自动化的唯一途径是社区工具
**[`aliyunpan`](https://github.com/tickstep/aliyunpan)**（Go 写的单文件 exe，开源）。
**先找它在哪** —— 不要假设它在 `PATH` 里（实测它就是放在某个自解压目录下的）：
```powershell
Get-ChildItem -Path "C:\", "D:\" -Filter "aliyunpan.exe" -Recurse -Depth 3 -ErrorAction SilentlyContinue |
ForEach-Object { $_.FullName }
```
**没找到就问用户**。**不要**自己下载安装 —— 它是第三方工具，装不装、装在哪由用户决定。
登录由用户做（`.\aliyunpan.exe login`，浏览器 + 手机扫码两次）。**这一步别代劳**，
也别去读它写下的凭证。
### ⚠️ 账号安全：这个 skill 里一个字都不许出现
工具把登录凭证存在它自己目录下的 `aliyunpan_config.json`。四条规矩，**没有例外**：
1. **不读** `aliyunpan_config.json`，也不读 `aliyunpan_command_history.txt`；
2. **不把它们的路径或内容**写进 skill、`TODO.md`、提交信息、对话；
3. 要看登录状态就**让工具自己回答** —— `aliyunpan ls /` 能列出内容就是登录了。
**别用 `who` / `loglist` / `quota`**：那几条会打印账号名、手机号、UID、空间配额；
4. **不把工具目录复制进仓库**。它本来就该在仓库外（`D:\…` 之类），保持这样。
## 步骤 1：上传前校验
```powershell
cd <仓库根>/desktop/src-tauri/target/release/bundle
…Read the whole file at its exact version.
How to install
mdr add hananxr/tadado/tadado-aliyun@sha256:4a3b0c9d344210e6The line at the top of this page pins the label git:20260921.8e863a8, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ttqe4auh74wp2a6z)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, all committed on Sep 21, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260921.8e863a8 latest | 2026-09-21 | 8e863a8 | 8,151 B | A | view · diff |
| git:20260921.f52db42 | 2026-09-21 | f52db42 | 7,666 B | A | view · diff |
| git:20260921.1116da8 | 2026-09-21 | 1116da8 | 7,109 B | A | view · diff |
| git:20260921.6ccf14a | 2026-09-21 | 6ccf14a | 5,339 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (8151 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
hananxr/tadado · 37 stars · license MIT · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ttqe4auh74wp2a6z GET https://markdownregistry.com/api/v1/resolve?ref=hananxr/tadado/tadado-aliyun GET https://markdownregistry.com/api/v1/blob/4a3b0c9d344210e68f89fbb1933f28067142fb05cf7c1489a759b58190c8182a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.