go SKILL.md skillA
go from zhaojiannet/canon is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add zhaojiannet/canon/go@git:20260926.2fd6ef0Pins git:20260926.2fd6ef0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- zhaojiannet/canon
- Path
plugins/flow/skills/go/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260926.2fd6ef0, committed Sep 26, 2026
- First version recorded
- Jun 6, 2026
- Size
- 2,875 bytes
- Repository stars
- 4
- License
- MIT
工作纪律：先查证再动手，找到真正的原因再修，收尾前审查代码，如实汇报.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
这是贯穿整个任务的工作纪律。不管在哪个时机敲它，都按下面对应的场合执行。 ## 开始前 - 先查后做：涉及库、工具、API 时，用 context7、WebFetch、`npm view <pkg> version` 查官方文档的当前稳定版。要引用的字段、API、路径、版本号，先读到再写。 - 方案选安全、稳定、主流的做法。更好的做法需要超出这次的范围或约束时，先写出理由和推荐，等我拍板再动。 - 动手前回答两个问题：有没有为用不到的需求加复杂度？有没有更简单、更标准的做法被漏掉？ - 任务有三步以上，先列任务清单，做完一项勾一项。 - 事实自己查：读文件、跑命令、查文档。只把需要我做的决定交给我：一次问一个，附上推荐答案和理由，等我回答再问下一个。 ## 动手时 - 每改完一处，跑类型检查和相关的单个测试文件。 - Edit 工具可能假报成功，改完重新读一遍文件确认。 - 收尾时全量跑一次单元测试和集成测试。项目有 `e2e/` 时，提醒我敲 `/flow:e2e run`，它按改动挑端到端测试来跑。 ## 涉及安全时 - 外部输入、认证授权、数据库、文件、网络请求：把输入当作不可信的，做校验和转义，按最小权限授权。 - 写完对照常见漏洞查一遍：注入、越权、SSRF、XSS、不安全的反序列化。拿不准就查当前的安全实践。 - 日志和返回给前端的内容只放必要信息：不含密钥、密码、个人信息，报错不带内部结构和调用栈。 - 引入或升级依赖前，查它有没有已知漏洞。 ## 遇到问题时 - 找到真正的原因再修，修法以官方文档为准。失败的测试和报错是线索：查清原因，改代码让它通过。吞掉错误、禁用测试、加兼容分支绕过去，都不算修好。 - 同一个错误修了两次还没好，停下来，重新验证你的假设，再动手。 ## 做错时 - 直接说错在哪、影响到什么，然后回去修真正的原因。 ## 收尾 1. 改了代码文件（`.md`、`.txt`、图片、锁文件以外的都算），跑 `/code-review`。新建、还没跟踪的文件先 `git add -N <路径>`，默认范围看不到它们。它在后台跑，等结果回来，修掉它确认的问题。只改了文档就跳过这一步。 2. 对照任务逐项核对：每一项要么做完并验证过，要么列进「遗留」，写清还差什么、卡在哪。 3. 汇报只写三件事：改了什么；怎么验证的，贴真实输出，失败就说失败；遗留项和需要我拍板的事。 底线：查证优于臆测，诚实优于好看，做对优于做快。
Read the whole file at its exact version.
How to install
mdr add zhaojiannet/canon/go@sha256:1f75fe1906a615a7The line at the top of this page pins the label git:20260926.2fd6ef0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ffacdcj5m52szak5)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jun 6, 2026 and Sep 26, 2026, about one every 28 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260926.2fd6ef0 latest | 2026-09-26 | 2fd6ef0 | 2,875 B | A | view · diff |
| git:20260926.7dc7ead | 2026-09-26 | 7dc7ead | 3,564 B | A | view · diff |
| git:20260821.f5d779a | 2026-08-21 | f5d779a | 3,056 B | A | view · diff |
| git:20260727.5a67c7d | 2026-07-27 | 5a67c7d | 3,068 B | A | view · diff |
| git:20260606.a0b7686 | 2026-06-06 | a0b7686 | 2,684 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2875 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
zhaojiannet/canon · 4 stars · license MIT · pushed 2026-10-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ffacdcj5m52szak5 GET https://markdownregistry.com/api/v1/resolve?ref=zhaojiannet/canon/go GET https://markdownregistry.com/api/v1/blob/1f75fe1906a615a7f48d75afae1a18e205874508aa0417afc250687535f03f44
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from zhaojiannet/canon
Every file in zhaojiannet/canon