governance SKILL.md skillA
governance from plugin87/ux-ui-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add plugin87/ux-ui-agent-skills/governance@git:20261006.5751441Pins git:20261006.5751441 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- plugin87/ux-ui-agent-skills
- Path
.claude/skills/governance/SKILL.md- Versions recorded
- 3
- Latest version
- git:20261006.5751441, committed Oct 6, 2026
- First version recorded
- Jun 8, 2026
- Size
- 2,472 bytes
- Repository stars
- 3,108
- License
- MIT
Govern how the design system evolves — SemVer for tokens/components, the contribution workflow, deprecation policy, and change communication. Use when the user wants to add/promote/deprecate a component or token, decide a version bump, set up a contribution process, or keep the system from fragmenting.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Skill: Governance
> **Step 0 — is the kit here?** This skill reads files from the kit. Check once:
> `ls ${CLAUDE_SKILL_DIR}/../../../tokens >/dev/null 2>&1 && echo KIT_OK || echo KIT_MISSING`
> On `KIT_MISSING` only the skill folders were installed, which is what
> `npx skills add` does. Say so plainly, point the user at
> `npx ux-ui-agent-skills init` or the plugin install, and stop. Do not guess the
> contents of a file you could not open.
Keep the system consistent as it grows. Apply versioning, contribution, and deprecation rules.
## Steps
1. Read `${CLAUDE_SKILL_DIR}/../../../workflows/governance.md` (SemVer table, contribution workflow, deprecation policy, change comms).
2. Classify the change: **major** (breaking — renamed/removed token or prop, changed anatomy/default), **minor** (additive — new token/component/variant/optional prop), **patch** (fix — contrast/bug/doc/value tweak in tolerance).
3. For a **new** component/token: confirm it serves a real, repeated need (≥ 2 places) before promoting product → candidate → core. Design it to the full quality bar (`.claude/rules/components.md` → Component Quality Bar).
…Read the whole file at its exact version.
How to install
mdr add plugin87/ux-ui-agent-skills/governance@sha256:e967f45db787bdd5The line at the top of this page pins the label git:20261006.5751441, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_cpx32q45ramivdul)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Jun 8, 2026 and Oct 6, 2026, about one every 60 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261006.5751441 latest | 2026-10-06 | 5751441 | 2,472 B | A | view · diff |
| git:20260824.db721b3 | 2026-08-24 | db721b3 | 1,711 B | A | view · diff |
| git:20260608.e166524 | 2026-06-08 | e166524 | 1,670 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2472 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
plugin87/ux-ui-agent-skills · 3,108 stars · license MIT · pushed 2026-10-27 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_cpx32q45ramivdul GET https://markdownregistry.com/api/v1/resolve?ref=plugin87/ux-ui-agent-skills/governance GET https://markdownregistry.com/api/v1/blob/e967f45db787bdd5236c9487ed779858198a0af8698424e60bdf5f0c418db6c6
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from plugin87/ux-ui-agent-skills
Every file in plugin87/ux-ui-agent-skills