S04 · Pipeline skill
Install and manage tools
Check tool provenance and licenses, approve account scopes, install and inspect calls.
Provenance and license checks + connection consent + call acceptance
- Pipeline
- 4 steps
- Human review
- 2
- Components
- 7
01Pipeline
Base pipeline
Ordered steps. Each consumes the previous output; review gates hold until a person accepts.
- Starts from
- Tool packages and requested access scopes
- Delivers
- Reviewed installation record and rollback procedure
Review contract
People decide at review gates; components supply data, drafts or review surfaces. Unaccepted outputs do not advance.
Integration note
Adapt package formats and transports separately; installation does not establish all domain tools as callable.
- 01
Check packages and licenses
- Input
- Tool packages and requested access scopes
- Output
- Signature and license checklist
- Signed plugin registry and trusted installationSigned extension registry + installation verification and revocation
- Dependency license policy and metadata auditDependency metadata comparison + license rule review
- 02
Approve account scopes
Human review- Input
- Signature and license checklist
- Output
- Human-approved connections and scopes
Decided byAssigned reviewer or requesting user
- External connector OAuth, PKCE and encrypted session lifecycleScoped connection consent + credential refresh and revocation
- Governed external tool and search adaptersSchema, permission and budget checks + evidenced tool calls
- 03
Install and register
- Input
- Human-approved connections and scopes
- Output
- Callable tool catalog and connection state
- MCP, skill and extension capability runtimeExtension discovery and installation + effective tool catalog
- MCP tool serving, schema dispatch and session transportAuthorized tool catalog serving + structured results
- 04
Check calls and rollback
Human review- Input
- Callable tool catalog and connection state
- Output
- Reviewed installation record and rollback procedure
Decided byAssigned reviewer or requesting user
- Plugin validation and rollback deploymentExtension package and configuration checks + release rollback
- Signed plugin registry and trusted installationSigned extension registry + installation verification and revocation
02Industry versions
Industry versions
Business & general services Transferable use When adding team tools, check provenance, licensing and account scope before installation and trial calls.
Adaptation Select adapters by package format and client and retain failure and revocation paths.
- 01
Check tool provenance and licenses
- Input
- Team tool list, access needs and license policy
- Output
- Signature and license review checklist
- Signed plugin registry and trusted installationSigned extension registry + installation verification and revocation
- Dependency license policy and metadata auditDependency metadata comparison + license rule review
- 02
Owner approves account scopes
Human review- Input
- Signature and license review checklist
- Output
- Approved tool connection scopes
Decided byAssigned reviewer or requesting user
- External connector OAuth, PKCE and encrypted session lifecycleScoped connection consent + credential refresh and revocation
- Governed external tool and search adaptersSchema, permission and budget checks + evidenced tool calls
- 03
Install and register team tools
- Input
- Approved tool connection scopes
- Output
- Effective tool catalog and connection state
- MCP, skill and extension capability runtimeExtension discovery and installation + effective tool catalog
- MCP tool serving, schema dispatch and session transportAuthorized tool catalog serving + structured results
- 04
Accept trials and check rollback
Human review- Input
- Effective tool catalog and connection state
- Output
- Acceptance record and rollback procedure
Decided byAssigned reviewer or requesting user
- Plugin validation and rollback deploymentExtension package and configuration checks + release rollback
- Signed plugin registry and trusted installationSigned extension registry + installation verification and revocation
03Parameters
Parameters
From the pack’s params.schema.json. Choose values to build a synthetic request.
skills/_pipelines/install-and-manage-tools/params.schema.json
{
"synthetic": true,
"run_id": "synthetic-example",
"locale": "en",
"industry": "base",
"adapter_mode": "local",
"records": [
{
"id": "synthetic-record-1",
"synthetic": true,
"text": "Synthetic observation A: a draft needs review."
},
{
"id": "synthetic-record-2",
"synthetic": true,
"text": "Synthetic observation B: retain the unresolved question."
}
],
"decisions": {}
} 04Member components
Member components
-
Signed plugin registry and trusted installation
Signed extension registry + installation verification and revocation
Working 1 pipeline -
Dependency license policy and metadata audit
Dependency metadata comparison + license rule review
Working 1 pipeline -
External connector OAuth, PKCE and encrypted session lifecycle
Scoped connection consent + credential refresh and revocation
Working 1 pipeline -
Governed external tool and search adapters
Schema, permission and budget checks + evidenced tool calls
Working 2 pipelines -
MCP, skill and extension capability runtime
Extension discovery and installation + effective tool catalog
Working 1 pipeline -
MCP tool serving, schema dispatch and session transport
Authorized tool catalog serving + structured results
Working 1 pipeline -
Plugin validation and rollback deployment
Extension package and configuration checks + release rollback
Working 1 pipeline
05Skills pack
Skills pack
Runnable reference on synthetic fixtures with tests. Domain contracts, services and approvals still need integration.
install-and-manage-tools-1.0.0.zip
Contains SKILL.md, pipeline.json, params.schema.json, runner, tests, fixtures, integration checklist and sources.
Synthetic workflow reference; service integration pending
Download · 18KBSHA-256 21348aa17d017943bd4a5576899d698e7f5d213679e607845970ebc6aa8fdca3