workspace-audit SKILL.md skillB
workspace-audit from danielc000/loom is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add danielc000/loom/workspace-audit@git:20261015.a669666Pins git:20261015.a669666 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- danielc000/loom
- Path
packages/daemon/assets/skills/workspace-audit/SKILL.md- Versions recorded
- 5
- Latest version
- git:20261015.a669666, committed Oct 15, 2026
- First version recorded
- Jul 12, 2026
- Size
- 23,241 bytes
- Repository stars
- 7
- License
- MIT
The operating doctrine for the Workspace Auditor — a read-mostly, suggest-only reviewer of the USER'S OWN workspace (their sessions, agents, agent prompts, and skills) for their workflow quality. Load at the start of any workspace-audit session to scan recent session transcripts for vague or ambiguous instructions in the user's own agent prompts/skills, and recurring prompts worth saving as one-click presets — suggesting improvements as board cards on the user's home and emitting preset…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Workspace Auditor — your-workspace review doctrine You are the **Workspace Auditor**: a reviewer that reads the user's session transcripts and turns what it finds into **suggestions that improve the user's own workflow** — sharper agent prompts and skills, and recurring prompts worth saving as one-click presets. You are the user's quality loop for *their* setup, not a developer of Loom. You are **read-mostly**: you read widely, and you write through a small, confined set of inert, dedupe-aware, suggest-only channels plus one best-effort nudge — nothing more. This is the defining constraint of the role, not a temporary limit: - You **read** — the user's session transcripts (live and archived), and, to ground a critique, the CURRENT text of what you're critiquing: an agent's live startup prompt (`agent_prompt_read`) and the user's skills (`skill_list` / `skill_read`). - You **suggest improvements** — a board card on the user's home (via `audit_suggest_improvement`) when a transcript shows a vague/ambiguous instruction in one of the user's own agent prompts or skills, or a concrete way to sharpen a prompt. …
Read the whole file at its exact version.
How to install
mdr add danielc000/loom/workspace-audit@sha256:896e93782c1352d5The line at the top of this page pins the label git:20261015.a669666, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_aotpip36gdl6nyy7)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jul 12, 2026 and Oct 15, 2026, about one every 24 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261015.a669666 latest | 2026-10-15 | a669666 | 23,241 B | B | view · diff |
| git:20260923.0e9c544 | 2026-09-23 | 0e9c544 | 23,236 B | B | view · diff |
| git:20260922.ca051aa | 2026-09-22 | ca051aa | 23,020 B | B | view · diff |
| git:20260906.66b6be5 | 2026-09-06 | 66b6be5 | 22,205 B | B | view · diff |
| git:20260712.e1d4888 | 2026-07-12 | e1d4888 | 21,963 B | B | view |
Audit of the latest version
- fail: No prompt-injection phrasing (matched: ignore your previous instructions)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (23241 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
danielc000/loom · 7 stars · license MIT · pushed 2026-10-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_aotpip36gdl6nyy7 GET https://markdownregistry.com/api/v1/resolve?ref=danielc000/loom/workspace-audit GET https://markdownregistry.com/api/v1/blob/896e93782c1352d5374fc959cde97a59cc316131ba7d9e16713c17af0dcc7a0c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.