AgentDock is a runtime that gives AI agents controlled access to files, commands, Git, browsers, containers, and other tools on local computers and remote servers. It is used to let agents write and test code, manage services, inspect systems, and coordinate work across multiple machines within explicit permissions.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add uvwt/agentdock --skill plugin-importgit clone --depth 1 https://github.com/uvwt/agentdockWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/uvwt/agentdock/plugin-import)<a href="https://agentmods.dev/skills/uvwt/agentdock/plugin-import"><img src="https://agentmods.dev/badge/skills/uvwt/agentdock/plugin-import/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/uvwt/agentdock/plugin-import"><img src="https://agentmods.dev/badge/skills/uvwt/agentdock/plugin-import.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.01480 |
| Opus 5.5 | $0.00024 | $0.00592 |
| Sonnet 5.5 | $0.00012 | $0.00296 |
| Haiku 4.5 | $0.00006 | $0.00148 |
Grade A, and why
plugin-import scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 27d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Plugin Import
用于把 Git、GitHub、外部 marketplace/catalog 等远程 Plugin 来源安全取得到本地。
plugin_manage 直接接受本地目录或 ZIP，并自动识别 AgentDock Portable、OpenAI 和 Claude Plugin 格式；OpenAI/Claude 的兼容性转换由 Core 在审核前完成，不需要模型手工改写 manifest 或重新打包。这个 Skill 只负责远程来源发现/固定/获取，以及 Core 尚不认识的其他格式。最终包的安全校验、规范化摘要、review token、安装事务和运行时激活仍由 plugin_manage 负责。
什么时候使用
以下情况使用本 Skill：
- 用户给出 Git / GitHub 仓库或仓库子目录；
- 用户给出外部 marketplace/catalog 条目；
- 用户要求更新一个需要重新从远程上游取得内容的 Plugin；
- 来源格式不是 AgentDock Core 已能自动识别的 Portable/OpenAI/Claude。
如果用户已经提供本地目录或 ZIP，不论它是 Portable、OpenAI 还是 Claude Plugin，都直接使用 plugin_manage，不要先手工转换。
职责边界
本 Skill 负责：
- 获取外部内容并尽量固定可追踪的 revision/digest；
- 对明确的远程来源生成根目录
.agentdock-import.json，把用户给出的来源和已验证的 revision/ref/subdir 交给 Core； - 把目标 Plugin 目录或 ZIP 准备到本地；
- 对 Core 尚不认识的其他格式，才由模型做显式转换；
- 调用
plugin_manage validate，检查自动识别结果、format、warnings、provenance； - 使用 validate 返回的 review token 安装或更新。
本 Skill 不负责绕过 Core 校验，也不要对 OpenAI/Claude 包做重复转换。
导入流程
-
取得来源
- 使用宿主已有的命令、文件、浏览器或连接器能力取得内容。
- Git 来源应尽量固定到具体 commit；下载归档应尽量记录可验证的 digest。
- 不把凭据、token、带密码的 URL 写进包或 provenance。
-
准备本地输入
- 如果目标已经是一个本地目录或 ZIP，直接保留原样。
- OpenAI
.codex-plugin/plugin.json、Claude.claude-plugin/plugin.json和 AgentDockplugin.json都交给 Core 自动识别。 - 不要为了“兼容”先删除 commands/note 或第三方扩展字段；Core 会保留未知内容，只对自己真正执行的语义做严格判断。
-
交接远程来源
- 只有当来源是用户明确给出的远程地址，或本次获取流程能够可靠证明远程来源时，才在目标 Plugin 根目录写
.agentdock-import.json。 - sidecar 只允许
origin、ref、revision、subdir。 origin使用稳定、无凭据的上游地址；Git 来源的revision优先填写实际解析到的 commit SHA，ref只在用户输入或实际仓库状态能确认时填写，subdir只在来源明确指向仓库子目录时填写。- GitHub/GitLab 的 tree/blob 子目录 URL 要拆成稳定仓库
origin+ 已确认的ref+ Pluginsubdir，不要把浏览器页面 URL 整体当作长期origin。 - 不确定的字段留空，不要根据仓库名、默认分支或 URL 习惯猜测。
- 用户只给本地目录或本地 ZIP，且无法证明其远程来源时，不创建 sidecar；Core 会使用内容摘要作为匿名本地 provenance。
- Core 只在自己的 staging snapshot 中读取并移除 sidecar；它不会修改原始来源，也不会把 sidecar 安装进最终 Plugin。
- 只有当来源是用户明确给出的远程地址，或本次获取流程能够可靠证明远程来源时，才在目标 Plugin 根目录写
-
仅在 Core 不认识格式时显式转换
- 对其他生态格式，模型才建立 Portable 目录并写
plugin.json/mcp.json。 - 对认证、执行权限、hook、agent 等存在语义差异的能力，不要臆造等价行为。
- 第三方未知元数据无需人工删除或改写；只在需要把完全陌生格式转换成 Portable 时生成 AgentDock 真正使用的运行字段。
- 对其他生态格式，模型才建立 Portable 目录并写
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 27d ago First seen · 88 lines · 60 tokens per session scan A cd9333e096a7
plugin-import is a skill published in the GitHub repository uvwt/agentdock (1,268 stars, last pushed 2d ago), licensed Apache-2.0. It adds 60 tokens to every session and 1,480 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-25.
Other skills, from other repositories
pkf-writing
Author, update, convert, validate, persist, and render PKF (.pkf) content through message-inline, Library Asset, or Memory Page carriers. Use for structured reports, knowledge pages, delivery cards, or any .pkf body. NOT for recall, memory-graph placement, or curation decisions — those belong to the memory skill.
prismer-python-debugpy
Debug Python: pdb REPL + debugpy remote (DAP).
memory-import
Bulk-import an external knowledge base into Prismer memory via the three-layer import pipeline (07 §3.1). Use when the user asks to import/migrate documents, a knowledge base, or notes into workspace memory. Layer 1 lands raw documents (zero LLM, instantly searchable); Layer 2 is YOUR distillation work — you read the…
sora-taira-testnet
Work against the SORA Taira testnet through its deployed Torii MCP endpoint for live account, asset, alias, contract, governance, Musubi package-registry, and transaction workflows. Use when Codex needs to inspect or mutate the Taira testnet, verify or add https://taira.sora.org/v1/mcp, prefer the curated iroha. tool…
gateway
Start and manage the Kurtosis gateway for Kubernetes. The gateway forwards local ports to the Kurtosis engine and services running in a k8s cluster. Required when using Kurtosis with Kubernetes. Use when kurtosis engine status shows nothing on k8s or services aren't reachable.
conventions
Spring Boot project conventions and mandatory rules. Auto-loads when working with Spring Boot, Java, or Maven projects. Enforces No-Lombok, constructor injection, RestClient, and other standards.