ai-coding-guardrails SKILL.md skillA
ai-coding-guardrails from onewave-ai/claude-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add onewave-ai/claude-skills/ai-coding-guardrails@git:20260920.97b5147Pins git:20260920.97b5147 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- onewave-ai/claude-skills
- Path
ai-coding-guardrails/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260920.97b5147, committed Sep 20, 2026
- Size
- 3,599 bytes
- Repository stars
- 421
- License
- MIT
Use when an AI coding agent is writing or refactoring production code and its known failure modes need to be held in check — over-engineering, silent scope creep, invented APIs, claiming work is done without checking, deleting tests to make them pass. Trigger when the user asks for careful, production-grade, or reviewed code, or when a previous agent run produced confident output that turned out wrong.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# AI Coding Guardrails Coding agents fail in a small number of predictable ways. This is the checklist that catches them before the diff lands. ## The Rules **1. Match the codebase, not your preferences.** Read two or three neighbouring files before writing. Use the project's existing patterns, naming, error handling, and comment density — even when you would have done it differently. A diff that reads like the rest of the repo is the goal. Introducing a new pattern is a decision the user makes, not a default. **2. Change the smallest thing that works.** No speculative abstraction. No config option nobody asked for. No "while I was in here" rewrite. If a fix is three lines, the diff is three lines. Refactors ride separately from behavior changes so a reviewer can see one thing at a time. **3. Never invent an API.** If you cannot see a function's signature in the repo, in installed source, or in the documentation, do not call it. Grep for it first. A plausible-looking method that does not exist is the single most common way agent code fails, and it fails at runtime, in front of the user. **4. Verify before claiming.** …
Read the whole file at its exact version.
How to install
mdr add onewave-ai/claude-skills/ai-coding-guardrails@sha256:f4aa2e87f33b62dbThe line at the top of this page pins the label git:20260920.97b5147, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_hqhgsrr4nk5v2b3i)
9 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 20, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3599 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
onewave-ai/claude-skills · 421 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_hqhgsrr4nk5v2b3i GET https://markdownregistry.com/api/v1/resolve?ref=onewave-ai/claude-skills/ai-coding-guardrails GET https://markdownregistry.com/api/v1/blob/f4aa2e87f33b62db5cfa91d1155f3c446a60c4746f0cbb11a2d597bcd0bbc594
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.