KeyInfo Bot
fca5c80516
Constraint: The public marketplace must not contain internal MCP endpoints, shared keys, project keys, or user-token workflows. Rejected: Publishing every configured KeyInfo MCP server | internal knowledge, Firecrawl, and Outline servers are not public distribution targets. Confidence: high Scope-risk: moderate Directive: Keep MCP publication behind an explicit allowlist and verify hidden plugin metadata before pushing. Tested: python scripts/validate_marketplace.py; temporary CODEX_HOME marketplace list/add/remove for mcp-playwright; hidden rg scan for internal MCP URLs and key markers. Not-tested: Live Playwright MCP browser tool invocation inside a fresh Codex session.
Codex 插件入口
这个目录是 EAPIL Codex 插件市场的 sparse checkout 入口。AI agent 通常应从仓库根 URL 安装市场：
codex plugin marketplace add https://git.playones.com/arechen/EapilSkillMarket.git --ref main
codex plugin marketplace upgrade eapil-skill-market
codex plugin list --marketplace eapil-skill-market
codex plugin add <plugin-id>@eapil-skill-market
只有在受限环境需要更小 checkout 时才使用 sparse 参数：
codex plugin marketplace add https://git.playones.com/arechen/EapilSkillMarket.git --ref main --sparse .agents --sparse plugins/codex
从仓库根目录本地调试：
codex plugin marketplace add .
codex plugin add docx@eapil-skill-market
每个 plugins/<plugin-id> 目录都是一个可安装 Codex plugin。插件可以包含官方支持的 skills、mcpServers、apps、hooks、interface 和 assets。当前公开 MCP 只包含 mcp-playwright；KeyInfo 内部 MCP 不发布到公开仓库。
完整插件清单、MCP 说明和维护规则见根目录 README.md。