parse-csv SKILL.md skillA

parse-csv from mrbinnacle/skill-harness is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add mrbinnacle/skill-harness/parse-csv@git:20260923.bd0c453

Pins git:20260923.bd0c453 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
mrbinnacle/skill-harness
Path
scripts/screens/419/v5_arms/placebo/parse-csv/SKILL.md
Versions recorded
1
Latest version
git:20260923.bd0c453, committed Sep 23, 2026
Size
4,777 bytes
Repository stars
16
License
MIT

Use before opening a CSV where a column may hold IDs. Quoting does NOT stop a spreadsheet's number parse (silently applied); it drops every leading zero. Check the column type first.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# parse-csv

This card ships three parts: an explanation of the trap, prevention-by-recipe for adopter-owned enforcement, and the recovery runbook below. It deliberately ships no executable script. Enforcement that must fire belongs in the adopter's environment; the card remains the model-invocable reference.

## The trap

A spreadsheet application opens a CSV and applies number parsing **before the user sees the data**. Quoting does not stop this: `="00123"` is still parsed as the number `123`. The parse is silent — no warning, no undo, no format column dialogue. Every cell in the affected column has its leading zeros stripped.

When an ID column (phone numbers, postal codes, product SKUs, employee badges) is parsed as numbers, every leading zero is lost. A downstream lookup that expects `"00123"` receives `123`, the join silently fails or matches the wrong row, and the corruption is visible only when a user notices a missing record.

## When this fires

Any of these conditions:

- The column contains IDs with leading zeros (phone, postal, SKU, badge)
- The column contains numeric strings wider than 15 digits (IEEE 754 precision loss)
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add mrbinnacle/skill-harness/parse-csv@sha256:8e4658087ea6be3e

The line at the top of this page pins the label git:20260923.bd0c453, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_4yfloibopzgs4ouu.svg)](https://markdownregistry.com/a/art_4yfloibopzgs4ouu)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Sep 23, 2026.

versioncommittedcommitsizeaudit
git:20260923.bd0c453 latest2026-09-23 bd0c453 4,777 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (4777 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

mrbinnacle/skill-harness · 16 stars · license MIT · pushed 2026-11-07 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_4yfloibopzgs4ouu
GET https://markdownregistry.com/api/v1/resolve?ref=mrbinnacle/skill-harness/parse-csv
GET https://markdownregistry.com/api/v1/blob/8e4658087ea6be3e2598b22b5d6c7cfc78d59f22a2aa240077380e1a44990499

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from mrbinnacle/skill-harness

AGENTS.md AGENTS.md file
mrbinnacle/skill-harness · AGENTS.md
git:20261107.500a82a · audit A · 16 stars
DESIGN.md@docs/design DESIGN.md file
mrbinnacle/skill-harness · docs/design/DESIGN.md · Compares one task with a skill and without it.
git:20261029.9d6cdcc · audit A · 16 stars
pull-rebase SKILL.md skill
mrbinnacle/skill-harness · scripts/screens/419/v4_arms/full/pull-rebase/SKILL.md · Use before `git pull` where `pull.rebase` may be `true`. `--no-ff` does NOT stop a rebase under `pull.rebase=true`…
git:20261019.0bcb9bd · audit A · 16 stars
push-secret-scan SKILL.md skill
mrbinnacle/skill-harness · scripts/screens/419/v4_arms/placebo/push-secret-scan/SKILL.md · Use before `git push` where the repository holds config files. A `.gitignore` entry does NOT stop `git add -f`…
git:20260922.d0ff304 · audit A · 16 stars
declared-synthetic-positive-control SKILL.md skill
mrbinnacle/skill-harness · tests/fixtures/sers/declared-synthetic-positive-control/SKILL.md · Declared synthetic positive control. Carries one invented fact so a Full-vs-Null contrast has a real effect by…
git:20260830.3bc5dde · audit A · 16 stars

Every file in mrbinnacle/skill-harness

Browse by kind, by grade A, or by owner.