audit-agent SKILL.md skillA
audit-agent from sergeyklay/.agents is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add sergeyklay/.agents/audit-agent@v2.2Pins v2.2 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- sergeyklay/.agents
- Path
.agents/skills/audit-agent/SKILL.md- Versions recorded
- 5
- Latest version
- v2.2, committed Sep 12, 2026
- First version recorded
- Sep 4, 2026
- Size
- 6,472 bytes
- Repository stars
- 6
- License
- Apache-2.0
Audits AI-agent runs and session snapshots for token usage, cache traffic, cost, duration, turns, tool calls, failures, retries, subagent attribution, duplicated reads, and artifact yield. Use when reporting or comparing a Codex CLI rollout, GitHub Copilot CLI, Gemini CLI, OpenCode, Claude Code, a runner export, or transcript logs. Do NOT use to monitor live CI, prove a check can fail, or sandbox a CLI.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Audit an Agent Run Reconstruct measurements from persisted records, not from the run's own summary. A native counter is evidence only after its scope, update semantics, and run boundary are known. ## Evidence contract - Keep the audit read-only. Never modify, vacuum, delete, migrate, or import into the runner's session store. - Treat transcripts and tool inputs as sensitive. Emit structural counts and identifiers by default; sanitize exports before they leave the machine. - Classify the result as `exact`, `estimate`, or `snapshot`. `Exact` requires a closed boundary and a successful second-path reconciliation. A live or resumable session is a `snapshot` through an explicit cutoff. - Preserve vendor categories. Report input, cache read, cache write, output, reasoning, and recorded cost separately; combine counters only when the schema proves they do not overlap. - Distinguish user turns, assistant messages, model steps, and tool calls. Never label one of them simply `turns`. Script paths are relative to this skill directory, not the project working directory. If a command cannot resolve `scripts/`, prefix it with the skill directory reported by the platform. …
Read the whole file at its exact version.
How to install
mdr add sergeyklay/.agents/audit-agent@sha256:f3e4b782ae7aa53bThe line at the top of this page pins the label v2.2, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4elrimkvpobeseev)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 4, 2026 and Sep 12, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v2.2 latest | 2026-09-12 | b1f8f9c | 6,472 B | A | view · diff |
| v2.0 | 2026-09-04 | 008c76f | 6,164 B | A | view · diff |
| v2.0 | 2026-09-04 | 7008d9b | 6,247 B | A | view · diff |
| v2.2 | 2026-09-04 | 873a58f | 6,473 B | A | view · diff |
| v2.1 | 2026-09-04 | cad9a99 | 6,343 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6472 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
sergeyklay/.agents · 6 stars · license Apache-2.0 · pushed 2026-10-16 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4elrimkvpobeseev GET https://markdownregistry.com/api/v1/resolve?ref=sergeyklay/.agents/audit-agent GET https://markdownregistry.com/api/v1/blob/f3e4b782ae7aa53bd90ddbc00ca345edd30ec4e79103b00d07d05aa31d9231ab
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.