pubky-staging-invite SKILL.md skillA

pubky-staging-invite from pubky/pubky-app is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add pubky/pubky-app/pubky-staging-invite@git:20260915.d786bb4

Pins git:20260915.d786bb4 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
pubky/pubky-app
Path
.agents/skills/pubky-staging-invite/SKILL.md
Versions recorded
1
Latest version
git:20260915.d786bb4, committed Sep 15, 2026
Size
2,502 bytes
Repository stars
26
License
MIT

Mints a single-use signup token for the Pubky staging homeserver. Use when the user explicitly asks for a new staging invite code or signup token; do not mint a token for informational questions about signup.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Pubky Staging Invite

Mint only the number of tokens the user explicitly requested. Generating a token changes server state; a question about signup or where to enter a token is not authorization to create one.

## Generate a token

Resolve bundled script paths against the directory containing this `SKILL.md`, then invoke the generator by its resolved path. For example, when the current directory is the skill directory:

```bash
bash scripts/generate.sh
```

The script looks for the admin password in this order:

1. `PUBKY_STAGING_ADMIN_PASSWORD` in the current process environment.
2. macOS Keychain or Linux Secret Service.
3. The Linux XDG credential file created by `scripts/configure.sh` when Secret Service is unavailable.

If no saved credential exists, ask the user to resolve and run the setup script the same way, once, in an interactive local terminal:

```bash
bash scripts/configure.sh
```
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add pubky/pubky-app/pubky-staging-invite@sha256:31444a57d40bdb68

The line at the top of this page pins the label git:20260915.d786bb4, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_zbyecr4wwjsijtgv.svg)](https://markdownregistry.com/a/art_zbyecr4wwjsijtgv)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Sep 15, 2026.

versioncommittedcommitsizeaudit
git:20260915.d786bb4 latest2026-09-15 d786bb4 2,502 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (2502 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

pubky/pubky-app · 26 stars · license MIT · pushed 2026-11-02 · branch dev

API

GET https://markdownregistry.com/api/v1/artifacts/art_zbyecr4wwjsijtgv
GET https://markdownregistry.com/api/v1/resolve?ref=pubky/pubky-app/pubky-staging-invite
GET https://markdownregistry.com/api/v1/blob/31444a57d40bdb6841d3ff243f0c16979ce2a12b18da3ef7f375c1d2e8a9b3be

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from pubky/pubky-app

pubky-code-review SKILL.md skill
pubky/pubky-app · .agents/skills/pubky-code-review/SKILL.md · Run a local code review of a diff against this repo's architecture rules (AGENTS.md, .greptile/config.json) and quality…
git:20261009.f54b19a · audit A · 26 stars
sentry-nextjs-sdk SKILL.md skill
pubky/pubky-app · .agents/skills/sentry-nextjs-sdk/SKILL.md · Full Sentry SDK setup for Next.js. Use when asked to "add Sentry to Next.js", "install @sentry/nextjs", or configure…
git:20260507.298cb6e · audit A · 26 stars
architecture Cursor rule
pubky/pubky-app · .cursor/rules/architecture.mdc · Core architecture rules - layer separation, dependencies, and anti-patterns
git:20260309.80c3cb2 · audit B · 26 stars
commit-message Cursor rule
pubky/pubky-app · .cursor/rules/commit-message.mdc · Enforce conventional commit message format
git:20260309.80c3cb2 · audit B · 26 stars
component-testing Cursor rule
pubky/pubky-app · .cursor/rules/component-testing.mdc · Writing unit tests for UI component rendering
git:20261009.f54b19a · audit B · 26 stars
components Cursor rule
pubky/pubky-app · .cursor/rules/components.mdc · Component development patterns - Shadcn first, atomic design, Figma parity
git:20260309.80c3cb2 · audit B · 26 stars
data-patterns Cursor rule
pubky/pubky-app · .cursor/rules/data-patterns.mdc · Data patterns - composite IDs, streams, TTL, pipes normalization
git:20260915.d786bb4 · audit B · 26 stars
env-variables Cursor rule
pubky/pubky-app · .cursor/rules/env-variables.mdc · Build-time Env and runtime PUBKY_RUNTIME_* configuration rules
git:20260915.d786bb4 · audit A · 26 stars
error-handling Cursor rule
pubky/pubky-app · .cursor/rules/error-handling.mdc · Error handling conventions using AppError across all layers
git:20260915.d786bb4 · audit B · 26 stars
local-first Cursor rule
pubky/pubky-app · .cursor/rules/local-first.mdc · Local-first write patterns and controller naming conventions
git:20260915.d786bb4 · audit B · 26 stars
pwa Cursor rule
pubky/pubky-app · .cursor/rules/pwa.mdc · PWA / service worker — shell-only precache, no data caching, user-consented updates, static offline fallback, manifest…
git:20260918.b35cf7a · audit A · 26 stars
sentry Cursor rule
pubky/pubky-app · .cursor/rules/sentry.mdc · Observability conventions (Sentry + Pulse) — capture funnel, direct-call rule and the Pulse consent gate
git:20260923.a27e420 · audit A · 26 stars

Every file in pubky/pubky-app

Browse by kind, by grade A, or by owner.