[chenhao233]

What this adds

PMNote helps game project managers find relevant public Chinese-language PMNote articles, podcasts, and guides about delivery planning, collaboration, career development, and AI tools.

Example prompt: 查找 PMNote 关于游戏项目版本排期的文章，整理常见风险并附上来源。

Expected result: a practical answer grounded in the relevant public sources, with links and a distinction between source claims and advice.

Requirements and data

The optional reader requires Python 3 and internet access. No account, API key, or paid service is needed for the skill itself. It reads pmnote.ai and public linked sources; the interview search sends search terms to the site's public Supabase endpoint. Web requests expose normal network metadata to those destinations. The skill package is MIT licensed; linked third-party works retain their own rights.

Validation

• npm run check using Node 24 and Python 3.12 with Pillow: 1120 passed, 1 skipped.
• Public reader smoke test retrieved the Tripo tool page successfully.
• The same skill has been published through the MiniMax Code web Skills marketplace; full conversational inference was not tested in this repository checkout.

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

[hetaoBackend]

Request changes for exact current head f2f235c9ffa94c0523069c1c65b97ac442830470.

Blocking review-gate issue: this exact head has no repository Check Runs and no completed exact-head Checks (total_count=0). The PR description reports local validation, but local results and [code]smith = SKIPPED cannot substitute for repository-owned exact-head evidence. Please provide a completed, successful repository Check on this SHA (including the relevant plugin validation/security coverage) before approval or merge can be considered.

The static audit of plugin.json, the PMNote Skill, references, and skills/pmnote/scripts/read.py found no direct command execution, private credential read, or unrestricted redirect path: network reads are limited to the fixed PMNote/Supabase public-read flow, same-origin redirects are enforced, response sizes are bounded, and explicit offline metadata reads enforce containment. This does not remove the exact-head Checks blocker.