xsm SKILL.md skillA

xsm from ysys143/xsm is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add ysys143/xsm/xsm@git:20261001.39533f0

Pins git:20261001.39533f0 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
ysys143/xsm
Path
skills/xsm/SKILL.md
Versions recorded
10
Latest version
git:20261001.39533f0, committed Oct 1, 2026
First version recorded
Sep 28, 2026
Size
5,485 bytes
Repository stars
6
License
MIT

Talk to other Claude Code or Codex sessions on this machine — list them, send a message or a task, answer one, start workers, and see what was delivered. Use when the user asks to contact, hand off to, or coordinate with another session or agent. Your user calls it as `/xsm <command>` in Claude Code and `$xsm <command>` in Codex (list, who, log, projects, doctor, send, link, join, leave, reach); you run the `xsm` shell command (`xsm list`, `xsm send <name|ref:xxxxxx> --text "..."`). Load this…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# xsm

`xsm` delivers a message into another session's own input. Everything it does
is a shell command, `xsm …`.

## Called with a command

When your user typed `/xsm <command>` (Claude Code) or `$xsm <command>` (Codex),
the command is the first word after it; in Claude Code it is also passed to
you as `ARGUMENTS:` below. For a command listed here, do exactly what its row says.

**Display commands** — `list`, `who`, `projects`, `doctor`. There is nothing to
decide. Run this one shell command, exactly as written:

    xsm <command> --table

Then reply with its output, copied exactly, as it is — not in a code block, so
the tables show as tables. Nothing before it, nothing after it. Do not
translate, reword, summarise or explain it, and run nothing else.

**`log`** — a display command too. Run these two shell commands, exactly as written:

1. `xsm ledger --table --mine --last 5`
2. `xsm held list --table`

Then reply with the layout below, each [output of command N] replaced by that
command's output copied exactly, as it is — not in a code block. Nothing before
it, nothing after it, and run nothing else.

    **Recent messages to and from this session**

    [output of command 1]
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add ysys143/xsm/xsm@sha256:ebc3cfa7ebba89e8

The line at the top of this page pins the label git:20261001.39533f0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_f6xzzfjf6fwzyev7.svg)](https://markdownregistry.com/a/art_f6xzzfjf6fwzyev7)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 10 versions of this file, between Sep 28, 2026 and Oct 1, 2026, more than one a day.

versioncommittedcommitsizeaudit
git:20261001.39533f0 latest2026-10-01 39533f0 5,485 BA view · diff
git:20261001.e4dea932026-10-01 e4dea93 5,233 BA view · diff
git:20261001.b7629932026-10-01 b762993 5,467 BA view · diff
git:20261001.bccc10f2026-10-01 bccc10f 5,215 BA view · diff
git:20261001.4623d792026-10-01 4623d79 5,224 BA view · diff
git:20260930.62407b02026-09-30 62407b0 5,132 BA view · diff
git:20260930.a97b8872026-09-30 a97b887 5,124 BA view · diff
git:20260928.cf797952026-09-28 cf79795 5,137 BA view · diff
git:20260928.bcbe4852026-09-28 bcbe485 5,060 BA view · diff
git:20260928.30c60ea2026-09-28 30c60ea 5,050 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (5485 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

ysys143/xsm · 6 stars · license MIT · pushed 2026-10-12 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_f6xzzfjf6fwzyev7
GET https://markdownregistry.com/api/v1/resolve?ref=ysys143/xsm/xsm
GET https://markdownregistry.com/api/v1/blob/ebc3cfa7ebba89e8bdc2ce0472d4fb22ea9af960275ed3e03f386fc9a0463817

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade A, or by owner.