create-plugin SKILL.md skillA
create-plugin from riot-org/riot is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add riot-org/riot/create-plugin@git:20261014.9c3854aPins git:20261014.9c3854a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- riot-org/riot
- Path
crates/riot-kernel/builtin/skills/create-plugin/SKILL.md- Versions recorded
- 2
- Latest version
- git:20261014.9c3854a, committed Oct 14, 2026
- First version recorded
- Sep 13, 2026
- Size
- 8,147 bytes
- Repository stars
- 22
- License
- a license file GitHub does not identify
用户想写一个 Riot 插件、把已有的技能/命令/hooks/MCP 打包分发、或把 Claude Code / Cursor 插件搬到 Riot 时用。目录布局、三种清单格式、dev.riot 扩展字段、本地链接调试流程和市场发布。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 写一个 Riot 插件
插件 = 一个目录。Riot **读现成的三种格式**，不自造：
| 格式 | 清单位置 | 何时选 |
| --- | --- | --- |
| Agent Plugins 开放标准 | `plugin.json` | 新写的插件，只有技能和 MCP，想同时被 Cursor / 别的客户端认 |
| Claude Code | `.claude-plugin/plugin.json` | 要带 `commands/`、`hooks/`；或本来就是 CC 插件 |
| Cursor | `.cursor-plugin/plugin.json` | 本来就是 Cursor 插件 |
三种可以并存：身份取 标准 > CC > Cursor 的第一份，组件位置的覆盖从每一份
收。**推荐**：新插件写标准 `plugin.json`，需要 hooks / commands 时再加一份
`.claude-plugin/plugin.json`（只写 `name` 和那几个字段）。
## 目录布局（固定位置，不用在清单里声明）
```text
my-plugin/
├── plugin.json 标准清单（见下）
├── skills/<名>/SKILL.md 技能。格式同 extend-riot 技能里说的
├── commands/**/*.md 斜杠命令。子目录是命名空间
├── hooks/hooks.json hooks。格式同 <配置目录>/hooks.json
├── mcp.json MCP 服务器（标准格式，见下）
├── bin/ 进 Bash 的 PATH（有就进，不用声明）
└── scripts/ 自带脚本，hooks / 命令里用 ${PLUGIN_ROOT}/scripts/x 引用
```
`agents/`、`rules/` Riot 暂不支持：装上会在设置页标成「不支持的组件」，
不静默丢，也不报错。
## plugin.json（标准）
```json
{
"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
"name": "my-plugin",
"version": "0.1.0",
"description": "一句话说它干什么",
"author": { "name": "你" },
"extensions": {
…Read the whole file at its exact version.
How to install
mdr add riot-org/riot/create-plugin@sha256:c0c20904246abe3eThe line at the top of this page pins the label git:20261014.9c3854a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_yrbqm6pdbimadez4)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Sep 13, 2026 and Oct 14, 2026, about one every 31 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261014.9c3854a latest | 2026-10-14 | 9c3854a | 8,147 B | A | view · diff |
| git:20260913.5e905fe | 2026-09-13 | 5e905fe | 7,787 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (8147 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
riot-org/riot · 22 stars · license a license file GitHub does not identify · pushed 2026-10-29 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_yrbqm6pdbimadez4 GET https://markdownregistry.com/api/v1/resolve?ref=riot-org/riot/create-plugin GET https://markdownregistry.com/api/v1/blob/c0c20904246abe3e19f30b48c349d5e9ee977842f6a5399475c85bfc2df04d8a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.