session-control SKILL.md skillA
session-control from zackees/clud is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add zackees/clud/session-control@git:20261016.78627d9Pins git:20261016.78627d9 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- zackees/clud
- Path
.claude/skills/session-control/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261016.78627d9, committed Oct 16, 2026
- Size
- 5,092 bytes
- Repository stars
- 14
- License
- a license file GitHub does not identify
Use when adding or changing a clud "session control" (a chat or agent control) — a switch only the user can turn that hooks enforce on every agent in a session, subagents included, such as "worktrees allowed", set from the user's prompt or the launch environment. Covers the state route (UserPromptSubmit → daemon session-flag dictionary → PreToolUse / harness-event hooks), session identity, the CLUD_* environment passthrough, fail-closed rules, and the tests to write.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Adding a session control The facts (state route, identity, the worktree control as the worked example) live in [docs/architecture/session-controls.md](../../../docs/architecture/session-controls.md). Read it first. This page is the checklist. ## Decide first - **Who may turn it on.** Only the user: their prompt, their launch environment or flag, or a mode they started (an active `/grind` run). Never anything an agent can write: Bash text, a file in the repo, a `clud` subcommand, or `CLUD_BAD_CMD_OVERRIDE`. Refused agents look for an escape, so leave none. - **Default and failure direction.** A control that refuses by default fails **closed**: no session id, daemon down, unreadable reply → refuse. A control that allows by default fails open. Write the choice in the module docs. - **Scope.** The payload `session_id` scopes it to one conversation and every subagent in it; `/clear` resets it. An environment variable scopes it to the whole launch. ## Steps 1. **Rule module** at the crate root, like `worktree_consent.rs`: the flag key, the env name, a pure `decide(...)` that takes the lookup as a …
Read the whole file at its exact version.
How to install
mdr add zackees/clud/session-control@sha256:38e655813ea3c9e8The line at the top of this page pins the label git:20261016.78627d9, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_exi63ksepta3govh)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 16, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5092 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
zackees/clud · 14 stars · license a license file GitHub does not identify · pushed 2026-10-22 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_exi63ksepta3govh GET https://markdownregistry.com/api/v1/resolve?ref=zackees/clud/session-control GET https://markdownregistry.com/api/v1/blob/38e655813ea3c9e84fdf338958fb7c3805a53fdbc0663da42b949931ad853692
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.