verify SKILL.md skillA
verify from parcha-ai/agentrun is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add parcha-ai/agentrun/verify@git:20261019.524bd20Pins git:20261019.524bd20 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- parcha-ai/agentrun
- Path
packages/pi-vision/skills/verify/SKILL.md- Versions recorded
- 2
- Latest version
- git:20261019.524bd20, committed Oct 19, 2026
- First version recorded
- Oct 18, 2026
- Size
- 11,190 bytes
- Repository stars
- 433
- License
- Apache-2.0
Check that a PDF has the marks a checklist names (a seal, a signature, a stamp, a number, two numbers that must agree), each answered yes or no with where it is on its page, cited as file.pdf#page=N&xywh=percent:x,y,w,h. Jev tells the kind of each page, whether each mark is there and its box. Use when a question asks whether a document (a certificate, a licence, a filed form) has what a document of its kind should have; another kind of document is another checklist file, not other code.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Verify a document against a checklist of marks
The checklist is a file: the kinds of page the document has and the marks to look for on them. The two steps below
check any PDF against any checklist; nothing in them names a kind of document. They answer whether each mark is
there and where, not whether the document is genuine: a copy, a specimen or a forgery can carry every mark.
## The checklist
```json
{
"document": "A certified copy of a filed certificate",
"pages": {
"certification": "The certification page: the issuing office's name at the top and 'DO HEREBY CERTIFY' in the body.",
"filed": "The first page of the filed certificate, with the filing office's stamp at the top."
},
"marks": [
{ "id": "seal", "page": "certification", "mark": "The office's seal", "present": "A round seal at the foot of the page.",
"question": "Is there a round official seal in `images[0].image`?", "box": "the round seal in `images[0].image`" },
{ "id": "file_number", "page": "certification", "mark": "The file number", "present": "A file number at the bottom left.",
…Read the whole file at its exact version.
How to install
mdr add parcha-ai/agentrun/verify@sha256:4b6c07fc97e4a1edThe line at the top of this page pins the label git:20261019.524bd20, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_2v653ppbgxkvma5g)
0 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Oct 18, 2026 and Oct 19, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261019.524bd20 latest | 2026-10-19 | 524bd20 | 11,190 B | A | view · diff |
| git:20261018.9be3b91 | 2026-10-18 | 9be3b91 | 11,099 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11190 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
parcha-ai/agentrun · 433 stars · license Apache-2.0 · pushed 2026-11-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_2v653ppbgxkvma5g GET https://markdownregistry.com/api/v1/resolve?ref=parcha-ai/agentrun/verify GET https://markdownregistry.com/api/v1/blob/4b6c07fc97e4a1edc39fe17cda4326555aa7e23c535c68587897310849e8f9bc
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from parcha-ai/agentrun
Every file in parcha-ai/agentrun