tadado-aliyun skillA
tadado-aliyun is agent-read markdown (skill) from hananxr/tadado: 把 Tadado2 的安装包上传到**阿里云盘**（国内下载渠道）、生成分享链接，再把链接写进 README。 触发词：阿里云、阿里云盘、国内下载、国内镜像、网盘、上传安装包、分享链接、aliyunpan、提取码。 与 `tadado-release` 的分工：那个管「从代码到 GitHub Release」，这个管「Release 之后， 让国内用户真的下得到」。.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# 安装包 → 阿里云盘（国内下载渠道）
## 为什么要有这一步
GitHub Releases 在国内**经常打不开**。旧版（v0.x）就吃过这个亏：`v0.1.2.1` 加了阿里云盘渠道，
`v0.1.2.3` 把「检查更新」也改成**阿里云盘优先、GitHub 备用**。Tadado2 没有联网能力、不会自己
检查更新，但**下载这一步照样会被挡住** —— 所以要有镜像。
## 工具：`aliyunpan`（第三方，不是官方）
阿里云盘**没有官方 API**，官方客户端也不提供命令行。能自动化的唯一途径是社区工具
**[`aliyunpan`](https://github.com/tickstep/aliyunpan)**（Go 写的单文件 exe，开源）。
**先找它在哪** —— 不要假设它在 `PATH` 里（实测它就是放在某个自解压目录下的）：
```powershell
Get-ChildItem -Path "C:\", "D:\" -Filter "aliyunpan.exe" -Recurse -Depth 3 -ErrorAction SilentlyContinue |
ForEach-Object { $_.FullName }
```
**没找到就问用户**。**不要**自己下载安装 —— 它是第三方工具，装不装、装在哪由用户决定。
登录由用户做（`.\aliyunpan.exe login`，浏览器 + 手机扫码两次）。**这一步别代劳**，
也别去读它写下的凭证。
### ⚠️ 账号安全：这个 skill 里一个字都不许出现
工具把登录凭证存在它自己目录下的 `aliyunpan_config.json`。四条规矩，**没有例外**：
1. **不读** `aliyunpan_config.json`，也不读 `aliyunpan_command_history.txt`；
2. **不把它们的路径或内容**写进 skill、`TODO.md`、提交信息、对话；
3. 要看登录状态就**让工具自己回答** —— `aliyunpan ls /` 能列出内容就是登录了。
**别用 `who` / `loglist` / `quota`**：那几条会打印账号名、手机号、UID、空间配额；
4. **不把工具目录复制进仓库**。它本来就该在仓库外（`D:\…` 之类），保持这样。
## 步骤 1：上传前校验
```powershell
cd <仓库根>/desktop/src-tauri/target/release/bundle
…Read the whole file at its exact version.
How to install
mdr add hananxr/tadado/tadado-aliyun@git:20260921.f52db42mdr add hananxr/tadado/tadado-aliyun@sha256:4020e10f1bd5e40aPin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_ttqe4auh74wp2a6z)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260921.f52db42 latest | 2026-09-21 | f52db42 | 7,666 B | A | view · diff |
| git:20260921.1116da8 | 2026-09-21 | 1116da8 | 7,109 B | A | view · diff |
| git:20260921.6ccf14a | 2026-09-21 | 6ccf14a | 5,339 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7666 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
hananxr/tadado · 23 stars · license MIT · pushed 2026-09-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ttqe4auh74wp2a6z GET https://markdownregistry.com/api/v1/resolve?ref=hananxr/tadado/tadado-aliyun GET https://markdownregistry.com/api/v1/blob/4020e10f1bd5e40aafc2074fc4fdfec29d5b8715e0b1b9186b1aa3c23afa1b38
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.