ironlint-config SKILL.md skillA

ironlint-config from ironlint/ironlint is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add ironlint/ironlint/ironlint-config@v2.1.0

Pins v2.1.0 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
ironlint/ironlint
Path
adapters/shared/ironlint-config/SKILL.md
Versions recorded
8
Latest version
v2.1.0, committed Oct 1, 2026
First version recorded
Jul 12, 2026
Size
4,020 bytes
Repository stars
20
License
Apache-2.0

Authors, modifies, or removes checks in an IronLint .ironlint.yml policy.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# IronLint policy authoring

IronLint runs project-owned shell commands after a change or before work is
accepted. A policy is `.ironlint.yml` with a required `version: 1` and a
nonempty `checks` mapping:

```yaml
version: 1

execution:
  timeout_secs: 30
  total_timeout_secs: 300

checks:
  format:
    files: ["*.rs", "Cargo.toml"]
    on: [change, accept]
    timeout_secs: 10
    run: cargo fmt --all --check

  tests:
    timeout_secs: 180
    run: cargo test --locked
```

Every check has one nonempty `run` command. `files` is an optional glob or list
of globs. Bare filename globs such as `*.rs` match at any depth. `on` defaults
to `[accept]`; the other valid form is `[change, accept]` (either order).
Acceptance is required for every check.

`accept` runs every check once in check-ID order. `change` runs only checks that
opt into change feedback. Known `--file` paths filter those checks through
`files`; without known paths, every change-enabled check runs. A check owns any
iteration over files. `files` selects a check; it does not restrict what the
command can read or modify.

The optional `execution` block accepts positive integer `timeout_secs` and
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add ironlint/ironlint/ironlint-config@sha256:4e34d6cfa52a9abf

The line at the top of this page pins the label v2.1.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_g7ggu5lzhidd5yd4.svg)](https://markdownregistry.com/a/art_g7ggu5lzhidd5yd4)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 8 versions of this file, between Jul 12, 2026 and Oct 1, 2026, about one every 12 days.

versioncommittedcommitsizeaudit
v2.1.0 latest2026-10-01 212c427 4,020 BA view · diff
v2.1.02026-09-30 33f417a 3,635 BA view · diff
v2.0.02026-09-18 4828bfc 2,714 BA view · diff
v1.3.02026-09-14 6da6d62 12,192 BA view · diff
v1.3.02026-08-20 e6d18f4 9,395 BA view · diff
v1.3.02026-07-15 e2c1081 8,189 BA view · diff
v1.3.02026-07-14 befd457 8,201 BA view · diff
v1.3.02026-07-12 a802966 10,172 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (4020 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

ironlint/ironlint · 20 stars · license Apache-2.0 · pushed 2026-10-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_g7ggu5lzhidd5yd4
GET https://markdownregistry.com/api/v1/resolve?ref=ironlint/ironlint/ironlint-config
GET https://markdownregistry.com/api/v1/blob/4e34d6cfa52a9abf490d28fce11d4c141a33aa628d303c735a230a1fa0285df9

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from ironlint/ironlint

adapter-drift-audit SKILL.md skill
ironlint/ironlint · .agents/skills/adapter-drift-audit/SKILL.md · Use when checking whether an IronLint adapter still matches its coding harness's current contract — auditing…
git:20260914.fc3936e · audit A · 20 stars
cleanup-build-artifacts SKILL.md skill
ironlint/ironlint · .agents/skills/cleanup-build-artifacts/SKILL.md · Removes transient build artifacts this task produced in the ironlint repo before declaring work done. Use at the end of…
v1.0.0 · audit A · 20 stars
AGENTS.md AGENTS.md file
ironlint/ironlint · AGENTS.md
git:20261002.75bc966 · audit A · 20 stars
CLAUDE.md CLAUDE.md file
ironlint/ironlint · CLAUDE.md
git:20260512.6793579 · audit B · 20 stars
llms.txt llms.txt file
ironlint/ironlint · llms.txt
git:20260914.fc3936e · audit A · 20 stars

Every file in ironlint/ironlint

Browse by kind, by grade A, or by owner.