package-author SKILL.md skillA
package-author from pinvou/pinvou-agent is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pinvou/pinvou-agent/package-author@git:20260907.afbe796Pins git:20260907.afbe796 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pinvou/pinvou-agent
- Path
pinvou3-app/src-tauri/resources/common/skill-marketplace/package-author/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260907.afbe796, committed Sep 7, 2026
- First version recorded
- Aug 21, 2026
- Size
- 6,657 bytes
- Repository stars
- 2,839
- License
- MIT
当用户要把手头的工具打包/标准化成 pinvou 插件包时使用——包括纯技能(SKILL.md)、纯 MCP 服务或它们的组合包。用户说"打包/做成插件包/标准化这个工具/给我一个能上传的标准包/写 plugin.json/加个图标"等，或给了散乱脚本/目录要整理成可上传 zip 时，用本技能把内容规范成 plugin-protocol 标准包（补 plugin.json、补 mcp/manifest.json、补 SKILL.md、补图标、校验命名）。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 插件包标准化（package-author）
把用户给的工具/技能/脚本，整理成 pinvou 应用商店可导入的**标准插件包**。规范以
`docs/plugin-package-spec.md` 为准，本文件内置完整规则，可直接照做、不依赖文档可达。
## 何时用 / 何时不用
- ✅ 用：用户要打包/标准化一个工具，给了文件/目录/脚本/SKILL.md/manifest.json/zip，或口头描述要一个插件包。
- ❌ 不用：用户只是"写个脚本"/"写个技能内容"而没说要打包；或是在装/卸载/开关某个已存在的工具。
## 先弄清三件事（问清再动手，别猜）
1. **输入在哪**：用户给的是目录路径、粘贴的代码、还是 zip？文件类型是什么？
2. **包类型**：纯技能？纯 MCP？还是 MCP+技能组合？（见 §类型判定）
3. **输出形态**：要一个**目录**（可直接 zip），还是直接产出 **zip**？
若用户没给 id/名称，按内容起一个语义化小写 id（如 `weather-insight`），并告诉用户可改。
---
## 类型判定（决定布局）
| 用户给的东西 | 类型 | 标准布局 |
|---|---|---|
| 只有 SKILL.md 或技能目录 | 纯技能 Skill | `skills/<name>/SKILL.md` |
| 一个 MCP server（脚本 + 描述） | 纯 MCP Mcp | `mcp/manifest.json` + `mcp/server.py` |
| MCP + 配套使用引导技能 | 组合 Bundle | `mcp/` + `skills/<name>/` 同时存在 |
---
## 标准包结构（必须落成这样）
```
<id>/
├── plugin.json ← 权威声明（见下）
├── mcp/ ← 纯 MCP / 组合包才有
│ ├── manifest.json
│ └── server.py
├── skills/<name>/ ← 纯技能 / 组合包才有
│ └── SKILL.md
└── icon.svg | icon.png ← 图标（缺失则生成，见 §图标）
```
---
## plugin.json（schema v1）
```jsonc
{
"manifest_version": 1, // 必填，=1
"id": "weather-insight", // 必填，[a-z0-9-_]{1,64} 全小写
…Read the whole file at its exact version.
How to install
mdr add pinvou/pinvou-agent/package-author@sha256:da8f8cf03e24f865The line at the top of this page pins the label git:20260907.afbe796, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ua6g5ftpv7z35nxe)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Aug 21, 2026 and Sep 7, 2026, about one every 17 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260907.afbe796 latest | 2026-09-07 | afbe796 | 6,657 B | A | view · diff |
| git:20260821.c75f2fb | 2026-08-21 | c75f2fb | 6,358 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6657 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pinvou/pinvou-agent · 2,839 stars · license MIT · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ua6g5ftpv7z35nxe GET https://markdownregistry.com/api/v1/resolve?ref=pinvou/pinvou-agent/package-author GET https://markdownregistry.com/api/v1/blob/da8f8cf03e24f8655705fb52207df580ea8e91a5e87aafcf86af795916790696
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.