shellflow SKILL.md skillC
shellflow from longcipher/shellflow is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add longcipher/shellflow/shellflow@git:20261028.8f64cecPins git:20261028.8f64cec in mdr.lock. Pin the fingerprint instead.
- Audit grade
- C, 15 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- longcipher/shellflow
- Path
SKILL.md- Versions recorded
- 12
- Latest version
- git:20261028.8f64cec, committed Oct 28, 2026
- First version recorded
- Sep 30, 2026
- Size
- 32,651 bytes
- Repository stars
- 5
- License
- none declared
Shell-native, agentless remote automation over ssh — concurrently, idempotently, and much faster than Ansible. Use when the user wants to run commands or deploy files across one or more servers from a plain Bash script annotated with `# @` comment directives, without installing any agent on targets. Triggers: "deploy", "run on servers", "run this across hosts", "ssh automation", "remote exec", "copy files to servers".
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# shellflow — shell-native remote automation shellflow is a shell-native, agentless automation tool that runs commands over ssh - concurrently, idempotently and 10x faster than ansible. The input is a **plain Bash script** whose blocks are delimited by `# @` comment directives. `bash deploy.sh` runs the file unchanged; `shellflow` drives the blocks: local execution, rsync/scp file copies, and concurrent remote execution over the host's login shell (`ssh host bash -l -s` / `zsh -l -s`, probed once per run, with the rc-extended login PATH injected into each payload so toolchain PATHs resolve as in a manual `ssh host`). Targets only need `bash`. ## When to use Reach for `shellflow` (instead of hand-rolling parallel ssh loops, or pulling in Ansible) when the task is: - running the same read-only or confined command across several hosts (`uname`, `df`, `date`, service status, …), - shipping a file/artifact to hosts and then acting on it, - a deploy pipeline: local build → copy artifact → remote restart, - anything that fits a linear sequence of local/remote/copy blocks. It does **not** manage persistent config state (no facts/state engine), does …
Read the whole file at its exact version.
How to install
mdr add longcipher/shellflow/shellflow@sha256:79ffe6a629a4d5ceThe line at the top of this page pins the label git:20261028.8f64cec, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_azyinkfmai45s5or)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 12 versions of this file, between Sep 30, 2026 and Oct 28, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261028.8f64cec latest | 2026-10-28 | 8f64cec | 32,651 B | C | view · diff |
| git:20261027.e8110c2 | 2026-10-27 | e8110c2 | 32,012 B | C | view · diff |
| git:20261025.f6d55d3 | 2026-10-25 | f6d55d3 | 31,617 B | C | view · diff |
| git:20261024.26a10d8 | 2026-10-24 | 26a10d8 | 31,605 B | C | view · diff |
| git:20261024.1c6ca78 | 2026-10-24 | 1c6ca78 | 31,453 B | C | view · diff |
| git:20261023.87a21a8 | 2026-10-23 | 87a21a8 | 29,672 B | C | view · diff |
| git:20261022.a153091 | 2026-10-22 | a153091 | 29,537 B | C | view · diff |
| git:20261020.8c15d34 | 2026-10-20 | 8c15d34 | 24,009 B | C | view · diff |
| git:20261020.6a44d75 | 2026-10-20 | 6a44d75 | 23,864 B | C | view · diff |
| git:20261020.5a86804 | 2026-10-20 | 5a86804 | 23,035 B | C | view · diff |
| git:20261018.b901a1f | 2026-10-18 | b901a1f | 20,559 B | C | view · diff |
| git:20260930.141ab4f | 2026-09-30 | 141ab4f | 14,544 B | C | view |
Audit of the latest version
- fail: No instruction to read or print local credentials (matched: cat > prod.env)
- fail: No script tag (matched: <SCRIPT)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (32651 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
longcipher/shellflow · 5 stars · license none declared · pushed 2026-10-28 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_azyinkfmai45s5or GET https://markdownregistry.com/api/v1/resolve?ref=longcipher/shellflow/shellflow GET https://markdownregistry.com/api/v1/blob/79ffe6a629a4d5cea205be8833277c30ba21da3d0fb6d2ca4be433a75cdc209d
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.