recat-web SKILL.md skillB

recat-web from 0xtbug/recat is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add 0xtbug/recat/recat-web@git:20260927.4cd1009

Pins git:20260927.4cd1009 in mdr.lock. Pin the fingerprint instead.

Audit grade
B, 16 of 17 checks passed
Kind
SKILL.md skill
Repository
0xtbug/recat
Path
SKILL.md
Versions recorded
1
Latest version
git:20260927.4cd1009, committed Sep 27, 2026
Size
9,716 bytes
Repository stars
12
License
MIT

Automatically install and set up the Recat website from github.com/0xtbug/Recat, including prerequisites, dependencies, local password, findings folder, build, and server startup. Also use to repair or develop an existing Recat installation.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Recat web setup

Install and start Recat when the user pastes this skill or asks for automatic website setup. This document works before the repository exists. Complete the setup using the available terminal tools; report any missing permissions or unavailable dependencies that prevent completion.

Repository: https://github.com/0xtbug/Recat

Clone URL: https://github.com/0xtbug/Recat.git

Use the user's chosen destination, source folder, and password when provided. Otherwise use the current workspace, preserve existing configuration, and generate a local password automatically. Ask only for information that actually blocks progress.

## 1. Acquire the repository

Check whether the current workspace already contains Recat: look for `package.json` with `name: recat`, `src/`, and `server/` at its root or in `frontend/`. Reuse an existing installation and preserve uncommitted changes. Do not pull, reset, or replace it during setup.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add 0xtbug/recat/recat-web@sha256:e9993971fa8cb834

The line at the top of this page pins the label git:20260927.4cd1009, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_dv4lecgdk7xwxntg.svg)](https://markdownregistry.com/a/art_dv4lecgdk7xwxntg)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Sep 27, 2026.

versioncommittedcommitsizeaudit
git:20260927.4cd1009 latest2026-09-27 4cd1009 9,716 BB view

Audit of the latest version

B  16 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • fail: No curl or wget piped into a shell (matched: curl -fsSL https://bun.com/install | bash)
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (9716 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.

Source

GitHub

0xtbug/recat · 12 stars · license MIT · pushed 2026-10-26 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_dv4lecgdk7xwxntg
GET https://markdownregistry.com/api/v1/resolve?ref=0xtbug/recat/recat-web
GET https://markdownregistry.com/api/v1/blob/e9993971fa8cb83445602e01466f3c80fe36211d104a0c4e1cdd0cd3c29500f5

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from 0xtbug/recat

AGENTS.md AGENTS.md file
0xtbug/recat · AGENTS.md
git:20260927.4cd1009 · audit A · 12 stars
CLAUDE.md CLAUDE.md file
0xtbug/recat · CLAUDE.md
git:20260927.4cd1009 · audit A · 12 stars
recat-findings SKILL.md skill
0xtbug/recat · skills/SKILL.md · Use when bug hunting, reviewing web, smart contract, or other security vulnerabilities, preparing PoC reports, or…
git:20260927.fe66b3d · audit A · 12 stars

Every file in 0xtbug/recat

Browse by kind, by grade B, or by owner.