diagnostic-dofile SKILL.md skillA
diagnostic-dofile from sepinetam/mcp-for-stata is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add sepinetam/mcp-for-stata/diagnostic-dofile@v0.1.0Pins v0.1.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- sepinetam/mcp-for-stata
- Path
plugins/stata-toolbox/skills/diagnostic-dofile/SKILL.md- Versions recorded
- 1
- Latest version
- v0.1.0, committed Sep 23, 2026
- Size
- 4,977 bytes
- Repository stars
- 275
- License
- AGPL-3.0
Use this skill when the user needs to inspect, audit, or diagnose the safety of a Stata do-file. Typical scenarios include: uncertainty about whether a .do file is safe; receiving a complete do-file from an unofficial source (not the Stata website, not a well-known academic institution or professor's official site); asking to check a batch of do-files; or requesting a read-only security/risk/portability diagnostic report. The skill does not modify the original file; it only emits a JSON report.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Diagnostic do-file This skill inspects a Stata do-file without changing the original file and outputs a JSON diagnostic report. The underlying script reuses `stata_mcp.utils.parse_dofile` and `stata_mcp.guard.blacklist`, so it handles Stata command abbreviations, prefixes (`capture` / `quietly`), macro expansion, block comments, `#delimit ;`, and other common constructs. ## When to use Recommended situations: - You receive a complete do-file from an unknown or unofficial source, especially one downloaded from outside the Stata website or well-known academic/professor sites. - The code arrives as an email attachment, cloud-drive link, forum post, or chat message, and you want to verify that it contains no dangerous commands or data-overwrite risks. - Before taking over or reproducing someone else's project, you want to audit the key do-files. - You explicitly want a read-only diagnostic report covering security, portability, encoding, and other dimensions. This skill is not required every time you write a do-file. For analysis code you wrote yourself, understand, and trust, you can run it directly without generating a diagnostic report each time. ## How to run ```bash …
Read the whole file at its exact version.
How to install
mdr add sepinetam/mcp-for-stata/diagnostic-dofile@sha256:c52ab7657821e2b3The line at the top of this page pins the label v0.1.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_caeqj2tajkzob6zd)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 23, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4977 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
sepinetam/mcp-for-stata · 275 stars · license AGPL-3.0 · pushed 2026-11-06 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_caeqj2tajkzob6zd GET https://markdownregistry.com/api/v1/resolve?ref=sepinetam/mcp-for-stata/diagnostic-dofile GET https://markdownregistry.com/api/v1/blob/c52ab7657821e2b365841cd0b096a0ebc222dd131edd39b0811afb53a8f16ffa
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.