MCP Server Builder
anthropics/skills
Guides the design and implementation of Model Context Protocol servers in TypeScript or Python, from tool naming and error messages to evaluation.
MCP guide for SiYuan system information, notebook permissions, action help, dangerous-operation confirmation, sensitive disclosures, and troubleshooting.
Install Siyuan MCP System Safety
$ npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install yangtaihong59/siyuan-plugins-mcp-sisyphus siyuan-mcp-system-safety --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/siyuan-mcp/siyuan-mcp-system-safety .claude/skills/siyuan-mcp-system-safety && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "siyuan-mcp-system-safety" agent skill from https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus/tree/main/skills/siyuan-mcp/siyuan-mcp-system-safety into .claude/skills/siyuan-mcp-system-safety/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "siyuan-mcp-system-safety", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus/tree/main/skills/siyuan-mcp/siyuan-mcp-system-safetyType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install yangtaihong59/siyuan-plugins-mcp-sisyphus siyuan-mcp-system-safety --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/siyuan-mcp/siyuan-mcp-system-safety .agents/skills/siyuan-mcp-system-safety && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "siyuan-mcp-system-safety" agent skill from https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus/tree/main/skills/siyuan-mcp/siyuan-mcp-system-safety into .agents/skills/siyuan-mcp-system-safety/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "siyuan-mcp-system-safety", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install yangtaihong59/siyuan-plugins-mcp-sisyphus siyuan-mcp-system-safety --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/siyuan-mcp/siyuan-mcp-system-safety .cursor/skills/siyuan-mcp-system-safety && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "siyuan-mcp-system-safety" agent skill from https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus/tree/main/skills/siyuan-mcp/siyuan-mcp-system-safety into .cursor/skills/siyuan-mcp-system-safety/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "siyuan-mcp-system-safety", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus.git --path skills/siyuan-mcp/siyuan-mcp-system-safety--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install yangtaihong59/siyuan-plugins-mcp-sisyphus siyuan-mcp-system-safety --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/siyuan-mcp/siyuan-mcp-system-safety .gemini/skills/siyuan-mcp-system-safety && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "siyuan-mcp-system-safety" agent skill from https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus/tree/main/skills/siyuan-mcp/siyuan-mcp-system-safety into .gemini/skills/siyuan-mcp-system-safety/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "siyuan-mcp-system-safety", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install yangtaihong59/siyuan-plugins-mcp-sisyphus siyuan-mcp-system-safetyInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/siyuan-mcp/siyuan-mcp-system-safety .github/skills/siyuan-mcp-system-safety && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "siyuan-mcp-system-safety" agent skill from https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus/tree/main/skills/siyuan-mcp/siyuan-mcp-system-safety into .github/skills/siyuan-mcp-system-safety/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "siyuan-mcp-system-safety", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install yangtaihong59/siyuan-plugins-mcp-sisyphus siyuan-mcp-system-safety --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/siyuan-mcp/siyuan-mcp-system-safety .opencode/skills/siyuan-mcp-system-safety && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "siyuan-mcp-system-safety" agent skill from https://github.com/yangtaihong59/siyuan-plugins-mcp-sisyphus/tree/main/skills/siyuan-mcp/siyuan-mcp-system-safety into .opencode/skills/siyuan-mcp-system-safety/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "siyuan-mcp-system-safety", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
siyuan-mcp-system-safety- GitHub stars
- 116
- Token cost
- ~1.1k tokens
- SKILL.md length
- 535 words
- Files
- 2
- Skills in repo
- 30
- Repo updated
- First seen
- Licence
- MIT
At a glance
MCP guide for SiYuan system information, notebook permissions, action help, dangerous-operation confirmation, sensitive disclosures, and troubleshooting.
- Works in 4 steps: Static package check: inspect the… → Actual loading: inspect the current… → Registration and unregistration: for an… → …
- Tasks that involve MCP servers
- SKILL.md covers Confirmation boundary, Extension trust and lifecycle…, Runtime and write guarantees and MCP safety
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Siyuan MCP System Safety is an agent skill from yangtaihong59/siyuan-plugins-mcp-sisyphus. MCP guide for SiYuan system information, notebook permissions, action help, dangerous-operation confirmation, sensitive disclosures, and troubleshooting.
Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files (for example `agents/openai.yaml`).
It sits in Agent Workflows, covering MCP servers. It works with Model Context Protocol. The repository describes itself as: 一个用于连接Agent与Siyuan的工具. The licence is MIT.
When your agent uses it
- Tasks that involve MCP servers
Example prompts
- “/siyuan-mcp-system-safety”
Workflow steps
4 steps, taken from the first numbered list in SKILL.md.
- Static package check: inspect the package metadata and required files, exact minAppVersion, backends, kernels, and frontends values, then…
- Actual loading: inspect the current runtime inventory and the user-visible enabled state. A package being present, discoverable, or…
- Registration and unregistration: for an approved live check, verify the lifecycle-owned surface after enablement (for example a frontend…
- Reload and functional readback: use the supported reload path, then repeat discovery and one harmless surface-specific interaction. Check…
What it can do on your machine
Read from SKILL.md and the folder at commit d2ad534. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Siyuan MCP System Safety loads about 1.1k tokens when it runs. Until then it costs about 45 tokens; SKILL.md has 535 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from yangtaihong59/siyuan-plugins-mcp-sisyphus at commit d2ad534, republished under its MIT licence (© yangtaihong59). 535 words, ~1,114 tokens.
Download SKILL.mdSave it as
.claude/skills/siyuan-mcp-system-safety/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.- name
- siyuan-mcp-system-safety
- description
- MCP guide for SiYuan system information, notebook permissions, action help, dangerous-operation confirmation, sensitive disclosures, and troubleshooting.
SiYuan System and Safety with MCP
Start with a connectivity check and inspect live help before unfamiliar actions.
system(action="get_version")system(action="get_current_time")notebook(action="get_permissions")Notebook permissions are rwd, rw, r, and none. Missing content can mean permission filtering rather than absence. Record the current value before proposing a permission change.
Confirmation boundary
Obtain explicit approval before notebook/document/block deletion or move, bulk replacement, asset upload or deletion, local-path export, tag/card removal, permission changes, and workspace path disclosure. State the exact target and consequence. A prior request to inspect or diagnose is not approval to mutate.
system(action="conf", mode="summary")system(action="network")system(action="notify", msg="Task complete", level="info", timeout=5000)extension(action="list", refresh=false)Extension trust and lifecycle verification
Treat an extension package as executable third-party code. Keep these checks separate; passing one does not prove the next one:
- Static package check: inspect the package metadata and required files, exact
minAppVersion,backends,kernels, andfrontendsvalues, then review the source, entrypoint, handlers, and cleanup paths. A package validator can catch malformed or incompatible files, but it cannot prove that SiYuan loaded the package. - Actual loading: inspect the current runtime inventory and the user-visible enabled state. A package being present, discoverable, or statically valid is not evidence that its
onloador kernel entrypoint ran. - Registration and unregistration: for an approved live check, verify the lifecycle-owned surface after enablement (for example a frontend Agent action or plugin MCP tool), then disable/unload it and verify the same name is gone. Confirm that DOM nodes, listeners, timers, RPC methods, and MCP tools are cleaned up; the official
siyuan://help/action/extension/listbridge only reports tools exposed by SiYuan's/mcpregistry and is not a substitute for frontend UI evidence. - Reload and functional readback: use the supported reload path, then repeat discovery and one harmless surface-specific interaction. Check that the new behavior works once, old registrations are absent, and no duplicate handlers remain. Do not treat a refreshed tool list as proof that a plugin UI or desktop-only code path works.
Browser-desktop verification covers browser-compatible surfaces and ordinary web UI only. SiYuan desktop-app verification is required for desktop-only surfaces such as Electron/desktop-window or backend/kernel behavior; a desktop pass does not prove browser compatibility. Use the exact manifest frontend values (desktop, desktop-window, browser-desktop, or browser-mobile) and validate each declared surface separately. Enabling, disabling, reloading, or invoking an untrusted package is a live side effect and requires explicit user approval; this scenario guidance does not authorize it.
Show full SKILL.md (150 more words)Show less
If an action or field is rejected, inspect siyuan://help/tool-overview and the relevant siyuan://help/action/{tool}/{action} resource instead of guessing. Search results can lag recent writes; direct ID/path reads do not depend on indexing.
Runtime and write guarantees
CLI execution is an explicit command, but that consent does not prove strict safe writes. Raw MCP payloads and Agent-generated calls likewise do not establish which coordinator or confirmation path handled them. Check the active runtime help and returned fields such as writeSafetyGuaranteed before relying on preflight, idempotency, or readback guarantees. If execution may have started and the response is lost, do not blindly resend; reread the exact target. Direct kernel, native, third-party, notification, sync, feedback, and local export effects remain outside Sisyphus strict-write guarantees.
MCP safety
Respect server permission errors and dangerous-action confirmation responses. Never bypass them with another action. The MCP server must not write skill files or configuration into the client machine.
© yangtaihong59, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 1 other file in skills/siyuan-mcp/siyuan-mcp-system-safety of yangtaihong59/siyuan-plugins-mcp-sisyphus.
- SKILL.md
- agents/openai.yaml
Open the folder on GitHubat commit d2ad534
Compare with similar skills
Siyuan MCP System Safety next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Siyuan MCP System Safety this skillyangtaihong59/siyuan-plugins-mcp-sisyphus | 116 | — | ~1.1k | Automated safety check: Pass | MIT | |
| MCP Server Builderanthropics/skills | 180k | 63 repos | ~2.3k | Automated safety check: Pass | Apache-2.0 | |
| MCP Server BuildershareAI-lab/learn-claude-code | 78k | 4 repos | ~1.2k | Automated safety check: Pass | MIT | |
| MCP Integration for Pluginsanthropics/claude-plugins-official | 38k | 11 repos | ~3.1k | Automated safety check: Pass | Apache-2.0 | |
| Crush Configurationcharmbracelet/crush | 29k | — | ~3.7k | Automated safety check: Pass | Custom licence | |
| Context Mode Output Sandboxmksglu/context-mode | 26k | — | ~4.1k | Automated safety check: Pass | Custom licence |
Similar skills
- Official
MCP Server Builder
shareAI-lab/learn-claude-code
Walks through building MCP servers in Python or TypeScript that expose tools, resources and prompts to Claude, with templates, registration and testing.
- Official
MCP Integration for Plugins
anthropics/claude-plugins-official
Explains how to bundle Model Context Protocol servers in a Claude Code plugin, covering config files, stdio, SSE, HTTP and WebSocket server types, and authentication.
Crush Configuration
charmbracelet/crush
Explains how to configure the Crush coding agent with crushrc or crush.json, covering providers, models, LSPs, MCP servers, hooks, permissions and config precedence.
Context Mode Output Sandbox
mksglu/context-mode
Routes large command, file, API and browser output through context-mode tools so only the needed result enters the agent's context, instead of dumping it via Bash.
Warp GUI to Agent CLI Migration
warpdotdev/warp
Migrates the compatible subset of settings and global file-based MCP servers from the Warp desktop app into Warp Agent CLI without exposing credentials or state.
More from yangtaihong59/siyuan-plugins-mcp-sisyphus
All 30 skills in this repoSiyuan Built Cjs Live Test
yangtaihong59/siyuan-plugins-mcp-sisyphus
使用仓库刚构建的 dist/mcp-server.cjs 与 cli/dist/cli.cjs，在真实思源实例的隔离测试笔记本中执行端到端验收。用于验证工具或 action 修改、严格安全写入、短哈希预检租约、幂等重放、状态变化拒绝、HTTP/stdio/CLI 一致性，以及用户要求“实际测试”“真实笔记本测试”“全部 action 测试”或“不要只跑 mock”时。
Claude Desktop MCP App
yangtaihong59/siyuan-plugins-mcp-sisyphus
Configure, repair, and verify MCP servers and MCP Apps in Claude Desktop on macOS.
Git Workflow Cn
yangtaihong59/siyuan-plugins-mcp-sisyphus
Chinese git workflow conventions including commit message generation and merge practices.
Siyuan MCP Browse Read
yangtaihong59/siyuan-plugins-mcp-sisyphus
MCP playbook for browsing and reading SiYuan notes. An agent skill from yangtaihong59/siyuan-plugins-mcp-sisyphus.
Siyuan MCP Create Edit
yangtaihong59/siyuan-plugins-mcp-sisyphus
MCP playbook for creating and editing SiYuan documents and blocks.
Siyuan MCP Sisyphus
yangtaihong59/siyuan-plugins-mcp-sisyphus
Top-level skill for operating SiYuan Note through the Sisyphus MCP server.
Related
Works with
Categories
Questions about Siyuan MCP System Safety
What does Siyuan MCP System Safety do?
MCP guide for SiYuan system information, notebook permissions, action help, dangerous-operation confirmation, sensitive disclosures, and troubleshooting. Siyuan MCP System Safety is an agent skill from yangtaihong59/siyuan-plugins-mcp-sisyphus. MCP guide for SiYuan system information, notebook permissions, action help, dangerous-operation confirmation, sensitive disclosures, and troubleshooting.
When should I use Siyuan MCP System Safety?
Siyuan MCP System Safety fits situations like: tasks that involve MCP servers.
How do I install Siyuan MCP System Safety in Claude Code?
Run `npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a claude-code`. Or copy the skill folder (skills/siyuan-mcp/siyuan-mcp-system-safety in yangtaihong59/siyuan-plugins-mcp-sisyphus) into .claude/skills/siyuan-mcp-system-safety in your project. Claude Code loads it when a task matches its description.
How do I install Siyuan MCP System Safety in Codex?
Run `npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a codex`. Or copy the skill folder (skills/siyuan-mcp/siyuan-mcp-system-safety in yangtaihong59/siyuan-plugins-mcp-sisyphus) into .agents/skills/siyuan-mcp-system-safety in your project. Codex loads it when a task matches its description.
Can I use Siyuan MCP System Safety in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add yangtaihong59/siyuan-plugins-mcp-sisyphus --skill siyuan-mcp-system-safety -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/siyuan-mcp-system-safety, .gemini/skills/siyuan-mcp-system-safety, .github/skills/siyuan-mcp-system-safety and .opencode/skills/siyuan-mcp-system-safety in your project.
What does Siyuan MCP System Safety need to run?
SKILL.md names no scripts, command-line tools or credentials: Siyuan MCP System Safety is instructions for the agent only.
Does Siyuan MCP System Safety access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Siyuan MCP System Safety safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Siyuan MCP System Safety use?
Siyuan MCP System Safety is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Siyuan MCP System Safety use?
About 1.1k tokens (SKILL.md is roughly 4.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Siyuan MCP System Safety?
Skills that share tags, products or a category with Siyuan MCP System Safety: MCP Server Builder (anthropics/skills, 180k stars), MCP Server Builder (shareAI-lab/learn-claude-code, 78k stars), MCP Integration for Plugins (anthropics/claude-plugins-official, 38k stars) and Crush Configuration (charmbracelet/crush, 29k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Siyuan MCP System Safety?
yangtaihong59 (a GitHub user) maintains it in yangtaihong59/siyuan-plugins-mcp-sisyphus, which has 116 GitHub stars. The repository holds 30 skills in this directory. The repository was last updated on October 8, 2026.
Source: yangtaihong59/siyuan-plugins-mcp-sisyphus on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.