web-research SKILL.md skillA
web-research from this-hw/hiway-kit is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add this-hw/hiway-kit/web-research@git:20261005.5e42440Pins git:20261005.5e42440 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- this-hw/hiway-kit
- Path
plugins/common/skills/web-research/SKILL.md- Versions recorded
- 5
- Latest version
- git:20261005.5e42440, committed Oct 5, 2026
- First version recorded
- Sep 24, 2026
- Size
- 4,650 bytes
- Repository stars
- 3
- License
- MIT
Multi-source external research with cited sources, using search/docs MCP servers when installed and built-in web tools otherwise. Use when a question needs several external sources compared or synthesized, or a web task needs the user's logged-in browser. Not for a single quick lookup.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Web Research MCP 서버가 설치돼 있으면 우선 활용하고, **없거나 실패하면 빌트인 WebSearch/WebFetch로 폴백**하여 외부 정보를 조사합니다. 이 스킬은 main 컨텍스트에서 실행되어 설치된 MCP를 안전하게 상속합니다 — MCP 존재를 가정하지 마세요. > **폴백 규율 [필수]**: Context7/Exa/Tavily가 설치돼 있지 않거나(사용자마다 다름), > 미인증·타임아웃으로 실패하면 **즉시 WebSearch/WebFetch로 전환**합니다. MCP 결과를 > **절대 지어내지 마세요** — 사용 불가한 소스는 "미사용"으로 명시하고 빌트인 결과로 > 대체합니다. (배포 에이전트 allowlist에 MCP를 하드코딩하면 미설치 시 환각이 발생하므로, > MCP 리서치는 이 스킬에서만 수행합니다 — CC #13898.) ## 사용법 ``` /web-research [라이브러리명] [버전] [기능] # 예: /web-research fastapi 0.115 OAuth2 password flow /web-research compare [A] vs [B] /web-research best practices for [주제] ``` 라이브러리 문서를 조사할 때는 **버전을 명시**한다(Context7 조회 규칙). 어떤 MCP 를 먼저 쓸지는 아래 "MCP 선택 가이드" 한 곳이 소유한다 — 여기서 다시 적지 않는다. ## 로그인된 브라우저가 필요한 웹 작업 로그인한 사이트·대시보드 조회, 폼 제출, JS 로 렌더되는 페이지처럼 **사용자의 브라우저 세션이 있어야 하는** 작업은 검색 MCP·WebFetch 로 닿지 않는다. **Aside CLI 가 있을 때만** (`command -v aside` 성공) 그쪽으로 위임한다 — 킷은 그 존재를 가정하지 않는다: 1. **`aside guide` 를 먼저 읽는다.** 버전에 맞는 사용법의 SSOT 는 그 출력이다 — 여기서 플래그를 다시 적지 않는다. 2. **`aside exec "<task>"` 로 위임한다**(권장 경로). 모델·effort 플래그는 사용자가 지정하지 않았으면 생략하고, 권한은 기본값 그대로 둔다(상향 플래그를 스스로 붙이지 않는다). 제출·전송처럼 밖으로 나가는 행위는 **사용자가 요청한 것만** 맡긴다. …
Read the whole file at its exact version.
How to install
mdr add this-hw/hiway-kit/web-research@sha256:b6e514825ba4c9c3The line at the top of this page pins the label git:20261005.5e42440, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_aehmwwmzlmjio6zz)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 24, 2026 and Oct 5, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261005.5e42440 latest | 2026-10-05 | 5e42440 | 4,650 B | A | view · diff |
| git:20260928.c57eb9e | 2026-09-28 | c57eb9e | 5,004 B | A | view · diff |
| git:20260927.0cb4f7f | 2026-09-27 | 0cb4f7f | 4,959 B | A | view · diff |
| git:20260926.64cea16 | 2026-09-26 | 64cea16 | 3,283 B | A | view · diff |
| git:20260924.677af4e | 2026-09-24 | 677af4e | 3,312 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4650 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
this-hw/hiway-kit · 3 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_aehmwwmzlmjio6zz GET https://markdownregistry.com/api/v1/resolve?ref=this-hw/hiway-kit/web-research GET https://markdownregistry.com/api/v1/blob/b6e514825ba4c9c34290b0ccf4c02ab202dc3be5c0560e80fac0a66387a3e611
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from this-hw/hiway-kit
Every file in this-hw/hiway-kit