publicity-review SKILL.md skillA
publicity-review from hiroro-work/claude-plugins is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add hiroro-work/claude-plugins/publicity-review@git:20260930.c4b8cabPins git:20260930.c4b8cab in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- hiroro-work/claude-plugins
- Path
.claude/skills/publicity-review/SKILL.md- Versions recorded
- 6
- Latest version
- git:20260930.c4b8cab, committed Sep 30, 2026
- First version recorded
- Jun 12, 2026
- Size
- 22,900 bytes
- Repository stars
- 47
- License
- none declared
Review uncommitted diff for content unsuitable for publication to a public repository — secrets/credentials, user-specific absolute paths, internal-only URLs/hostnames, and personal identifiers. Each iteration dispatches a fresh subagent that returns findings and the main thread applies the subagent's mechanical fixes — a single pass by default, or re-dispatching up to `Max iterations` when the caller raises it. Non-interactive — no user prompts. Use as a final gate before publishing changes…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Publicity Review The convergence signal is the executor itself returning `findings: []` AND `suggested_edits: []` on a pass verdict. By default the skill runs a **single** pass; a caller that raises `Max iterations` loops until that signal, max iterations is reached, a divergence is detected, or a safety rail trips. The detection scope is narrow on purpose: secrets, user-specific absolute paths (e.g. `/Users/<name>/...`), internal-only URLs / hostnames, personal identifiers, and obvious proprietary internal info. It is **not** a generic linter — license, brand, or stylistic content is out of scope. It never prompts the user. ## Invocation contract The caller passes these fields in natural language (the skill extracts them from the invocation text): - `Base ref` *(optional, default `HEAD`)* — git ref to diff against - `Max iterations` *(optional, default `1`)* — upper bound on the refinement loop. Default `1` is a single detect-and-apply pass — a caller that wants the applied fixes re-verified raises it explicitly …
Read the whole file at its exact version.
How to install
mdr add hiroro-work/claude-plugins/publicity-review@sha256:1489b488da0d3b13The line at the top of this page pins the label git:20260930.c4b8cab, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_342ivfgtxe7l3ro5)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Jun 12, 2026 and Sep 30, 2026, about one every 22 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260930.c4b8cab latest | 2026-09-30 | c4b8cab | 22,900 B | A | view · diff |
| git:20260819.bbea1b2 | 2026-08-19 | bbea1b2 | 23,068 B | A | view · diff |
| git:20260818.c661bc3 | 2026-08-18 | c661bc3 | 22,710 B | A | view · diff |
| git:20260801.4832566 | 2026-08-01 | 4832566 | 27,243 B | A | view · diff |
| git:20260710.15f09b2 | 2026-07-10 | 15f09b2 | 24,566 B | A | view · diff |
| git:20260612.47840e7 | 2026-06-12 | 47840e7 | 24,390 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (22900 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
hiroro-work/claude-plugins · 47 stars · license none declared · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_342ivfgtxe7l3ro5 GET https://markdownregistry.com/api/v1/resolve?ref=hiroro-work/claude-plugins/publicity-review GET https://markdownregistry.com/api/v1/blob/1489b488da0d3b13966f0a3381fcf991e432d6ba48c804b9e0060c5de8f9a811
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.