audit-execution-guide SKILL.md skillA
audit-execution-guide from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add devcodex-labs/devcodex/audit-execution-guide@git:20261017.e96e3c4Pins git:20261017.e96e3c4 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- devcodex-labs/devcodex
- Path
content/skills/audit-execution-guide/SKILL.md- Versions recorded
- 4
- Latest version
- git:20261017.e96e3c4, committed Oct 17, 2026
- First version recorded
- Jul 30, 2026
- Size
- 7,559 bytes
- Repository stars
- 432
- License
- AGPL-3.0
审查执行指南 — 维度优先级分批、定向审查子集、联动检查清单.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Audit Execution Guide Skill ## 职责 本 Skill 定义 audit 工作流的执行策略，补充 `audit-common/SKILL.md` 的收敛规则，提供：定向触发子集、新增子类型联动检查、数值引用联动协议。 ## 维度优先级分批 | 批次 | 维度 | 说明 | |------|------|------| | 🔴 第一批 | D1·D2·D3·D4·D5·D7·D9·D10·D11·D12·D16·D17·D21·D22·D23·D24·D25 | 强制，立即标记 | | 🟡 第二批 | D6·D8·D18·D19·D20 | 建议，不阻塞 | | 💡 第三批 | D13·D14·D15 | 改进，Token 允许时执行 | ## 事件驱动定向审查 audit 每轮先形成 `ReviewExecutionPlanV1`，按 stage+risk+claims/dimensions 选择 R0~R4；默认需要连续三个具有 coverage/dimension delta 的有效零发现轮次。只有满足 `audit-common §窄范围 audit 收敛降档` 的全部条件，才可记录 `convergenceMode=narrow-2` 并使用两轮；targeted 标签本身不构成降档依据，full/security/release 不降档。receipt 复用必须通过 `ReviewEvidenceFreshnessGate` 与 5% 稳定内容 oracle，unknown/mismatch 一律 full-required。 | 触发场景 | 推荐专属维度 | |---------|------------| | 修改了 RULES.md | D2·D3·D5·D9·D17 | | 修改了 01-common.instructions.md | D2·D5·D6·D7·D10 | | 修改了 workflow README | D3·D5·D8·D9 | | 审查 README / 用户使用文档 / 项目文档 / 菜单导航 | DA-1·DA-2·DA-5·DA-6 + `audit-user-manual`；README / 主入口文档再叠加 `audit-readme`（RM-1~RM-6） | | 审查发布前准备 / release pre-review | RL-1·RL-2·RL-3·RL-4·RL-5·RL-6·RL-9 + `audit-release`（RL-1~RL-10） | …
Read the whole file at its exact version.
How to install
mdr add devcodex-labs/devcodex/audit-execution-guide@sha256:1ed1ecca589364f9The line at the top of this page pins the label git:20261017.e96e3c4, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_dl5lnqegmq3ultyb)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Jul 30, 2026 and Oct 17, 2026, about one every 26 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261017.e96e3c4 latest | 2026-10-17 | e96e3c4 | 7,559 B | A | view · diff |
| git:20261017.77d22cc | 2026-10-17 | 77d22cc | 7,444 B | A | view · diff |
| git:20261017.d4150f6 | 2026-10-17 | d4150f6 | 7,444 B | A | view · diff |
| git:20260730.6ee304a | 2026-07-30 | 6ee304a | 6,946 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7559 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_dl5lnqegmq3ultyb GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/audit-execution-guide GET https://markdownregistry.com/api/v1/blob/1ed1ecca589364f9874c208b46eebd97b3ebe8b9f898eb0e7ca215dea2c95a62
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.