webjs SKILL.md skillB
webjs from webjsdev/webjs is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add webjsdev/webjs/webjs@git:20261008.e0a4867Pins git:20261008.e0a4867 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- webjsdev/webjs
- Path
.agents/skills/webjs/SKILL.md- Versions recorded
- 7
- Latest version
- git:20261008.e0a4867, committed Oct 8, 2026
- First version recorded
- Sep 10, 2026
- Size
- 29,486 bytes
- Repository stars
- 27
- License
- MIT
Build and review WebJs applications. Use when working on WebJs app structure, pages, layouts, routes, server actions, components, signals, data and validation, auth, sessions, styling, the client router, streaming, or tests. WebJs is AI-first, web-components-first, and has no build step.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Build a WebJs App
Use this skill for end-to-end WebJs app work. It helps you choose the right layer first, reach for the right export, and avoid the WebJs-specific mistakes that Next.js or Lit muscle memory causes. WebJs is its own framework: the component API matches Lit and the routing feels like Next, but the execution model is neither.
## Full Documentation
This skill is the quick guide. When you need the full API reference for a surface, load the matching file in `references/` (listed below). For even deeper framework detail, WebJs ships buildless, so the source you run IS the source you read: look in `node_modules/@webjsdev/{core,server,cli}/` (each package ships its own `AGENTS.md`). To check ONE export's contract, run `npx webjs source <Export>` (for example `npx webjs source createAuth`, or `--pkg core` to narrow): it prints that export's signature and the doc comment above it from the installed package, so you read the declaration instead of the file. The MCP `source` tool does the same with `export`. Open the source file when the question is about behaviour the signature does not state. The complete hosted docs live at https://webjs.dev/docs.
## What WebJs Is
…Read the whole file at its exact version.
How to install
mdr add webjsdev/webjs/webjs@sha256:60bb760f9f41375dThe line at the top of this page pins the label git:20261008.e0a4867, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_2z2qh23sbufwyej4)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 7 versions of this file, between Sep 10, 2026 and Oct 8, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261008.e0a4867 latest | 2026-10-08 | e0a4867 | 29,486 B | B | view · diff |
| git:20261008.7d205e7 | 2026-10-08 | 7d205e7 | 30,335 B | B | view · diff |
| git:20261008.3dfa836 | 2026-10-08 | 3dfa836 | 29,920 B | B | view · diff |
| git:20261007.1b65f46 | 2026-10-07 | 1b65f46 | 29,927 B | B | view · diff |
| git:20261007.f948b91 | 2026-10-07 | f948b91 | 30,227 B | B | view · diff |
| git:20261007.a605709 | 2026-10-07 | a605709 | 30,289 B | B | view · diff |
| git:20260910.1b80e0c | 2026-09-10 | 1b80e0c | 29,710 B | B | view |
Audit of the latest version
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (29486 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
webjsdev/webjs · 27 stars · license MIT · pushed 2026-10-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_2z2qh23sbufwyej4 GET https://markdownregistry.com/api/v1/resolve?ref=webjsdev/webjs/webjs GET https://markdownregistry.com/api/v1/blob/60bb760f9f41375d1748467c2ca140d5d292c87b97755c6718ecc4f20a4833e7
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.