pack-skill SKILL.md skillA
pack-skill from qiusuo0226/chrono-pm-skill is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add qiusuo0226/chrono-pm-skill/pack-skill@git:20260925.0e74e3dPins git:20260925.0e74e3d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- qiusuo0226/chrono-pm-skill
- Path
tools/pack-skill/SKILL.md- Versions recorded
- 6
- Latest version
- git:20260925.0e74e3d, committed Sep 25, 2026
- First version recorded
- Aug 14, 2026
- Size
- 4,978 bytes
- Repository stars
- 6
- License
- MIT
将任意 Qoder Skill 项目打包为分发包 zip。自动检测项目结构，包含全部项目文件，仅排除开发者/构建产物。当用户要求打包 skill、生成分发包、创建发布 zip 时使用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Pack Skill — 通用 Skill 分发包打包
## 触发场景
用户说"打包 skill"、"生成分发包"、"创建发布 zip"、"导出 skill"时调用。
## 设计原则
**包含全部，排除已知**——不预设任何 Skill 特有的目录结构。
任何符合 Qoder Skill 规范的项目（有 SKILL.md）都能打包。
## 执行流程
### Step 1：定位 Skill 根目录
检查当前工作区：
- 仓库根下存在 `ChronoPM-Project/SKILL.md` → Skill 根目录 = `ChronoPM-Project/`（v3.1.1 CR-G）
- 当前目录存在 `SKILL.md` → 当前目录即为 Skill 根目录
- 否则报错退出
### Step 2：读取版本信息
按优先级读取版本号：
1. `VERSION` 文件（纯文本）
2. `skill.json` 的 `version` 字段
3. 都没有 → 报错
同时从 `skill.json` 读取 `name` 字段作为包名（缺省用 `skill`）。
### Step 3：执行打包
运行本 skill 目录下的打包脚本：
**本机主路径（Python）：**
```bash
python tools/pack-skill/scripts/pack.py --skill-root <path>
```
**跨平台参考实现（PowerShell，执行策略受限时不可用）：**
```powershell
powershell -ExecutionPolicy Bypass -File ~/.qoder/skills/pack-skill/scripts/pack.ps1 -SkillRoot <path>
```
脚本逻辑：
1. 扫描 Skill 根目录下全部文件
2. 排除下方黑名单中的路径/模式（排除模型实读自 pack.ps1，单一事实源）
3. 其余全部打入 zip
4. 产物命名：`{BrandName}-Skill-v{version}.zip`（BrandName 取自 skill.json displayName 品牌前缀）
5. **单包（v4.0.0）**：只打 `--skill-root` 指向的那一个技能。`portfolio-skill/`、`query-skill/` 在 ChronoPM-Project 包内，随包打入，不另打 zip。`governance/migrations/`（仅当前 upgrade）与 `governance/contracts/skill-contract.md` 例外放行入包。
**建议先 DryRun 预览：**
```bash
…Read the whole file at its exact version.
How to install
mdr add qiusuo0226/chrono-pm-skill/pack-skill@sha256:1d0247003bcd14b2The line at the top of this page pins the label git:20260925.0e74e3d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_wzg3tuw5gry2oppn)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Aug 14, 2026 and Sep 25, 2026, about one every 8 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260925.0e74e3d latest | 2026-09-25 | 0e74e3d | 4,978 B | A | view · diff |
| git:20260822.72ee79f | 2026-08-22 | 72ee79f | 5,068 B | A | view · diff |
| git:20260820.2b25904 | 2026-08-20 | 2b25904 | 4,609 B | A | view · diff |
| git:20260820.eaa2dc6 | 2026-08-20 | eaa2dc6 | 4,391 B | A | view · diff |
| git:20260814.dc014c7 | 2026-08-14 | dc014c7 | 4,058 B | A | view · diff |
| git:20260814.284a785 | 2026-08-14 | 284a785 | 3,642 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4978 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
qiusuo0226/chrono-pm-skill · 6 stars · license MIT · pushed 2026-09-30 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_wzg3tuw5gry2oppn GET https://markdownregistry.com/api/v1/resolve?ref=qiusuo0226/chrono-pm-skill/pack-skill GET https://markdownregistry.com/api/v1/blob/1d0247003bcd14b20d619d620005c0770e7faaca97452e05df08dfb84418a228
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.