sergeyklay/.agents · .agents/skills/isolate-cli/SKILL.md
isolate-cli skillA
Run a third-party CLI as a subprocess without leaking into it or leaving state on the host, and prove both. Use when a script or skill shells out to an external tool, when a run must leave no trace outside the repository, when private input (a diff, a prompt, a credential) must not reach the tool's session log, when a policy or deny-list handed to the tool must actually be in force, when a claim about the tool's own behaviour (which paths it searches, which config file wins) must be settled agai
Latest version
mdr add sergeyklay/.agents/isolate-cli@v1.0Exact content
mdr add sergeyklay/.agents/isolate-cli@sha256:ca7e597f7a7b6a66Badge
[](https://markdownregistry.com/a/art_44fqpocebi7pg5ql)
0 badge views in 30 days
Versions
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (16231 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
sergeyklay/.agents · 5 stars · license Apache-2.0 · pushed 2026-09-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_44fqpocebi7pg5ql GET https://markdownregistry.com/api/v1/resolve?ref=sergeyklay/.agents/isolate-cli GET https://markdownregistry.com/api/v1/blob/ca7e597f7a7b6a66e770b99448751b87a82ce8deca494be89d1e357fbabde061