deadeye-guard SKILL.md skillB
deadeye-guard from deepaksinghcs14/deadeye-cc is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add deepaksinghcs14/deadeye-cc/deadeye-guard@git:20261016.22a761dPins git:20261016.22a761d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- deepaksinghcs14/deadeye-cc
- Path
skills/deadeye-guard/SKILL.md- Versions recorded
- 13
- Latest version
- git:20261016.22a761d, committed Oct 16, 2026
- First version recorded
- Sep 2, 2026
- Size
- 11,970 bytes
- Repository stars
- 6
- License
- MIT
Security review of the current diff -- full OWASP-mapped coverage (Top 10:2025, API Security Top 10 2023, LLM Top 10:2025), injection through auth, config, and vulnerable dependencies.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Deadeye Guard Review ONLY the changed code for security exposures. Nothing else: the other three lenses (`/deadeye-review`) and lean-lens over-engineering specifically are not this skill's job. This is the deep, dedicated security pass: deeper than the security lens `/deadeye-review`/`/deadeye-pr` run alongside their other lenses, and the one that reads around the hunk, verifies before reporting, and runs real dependency auditors where they're installed. It's also the pass behind coder mode's live Edit/Write advisory: that advisory is a fast regex reminder on the text just written; this skill does the deep read. ## Scope Get the diff with `git diff` (or `git diff --staged` if the user says staged, or `git diff <ref>` for a named base). Read the changed hunks plus enough surrounding context to judge a trust boundary — "is this input actually validated" often requires seeing the caller. - Empty diff (nothing changed or staged): say so plainly and stop — do not substitute a different scope. - Not a git repo: say so plainly and stop -- same as an empty diff above. - Diff-scoped by design, not repo-wide — a whole-repo sweep would re-read …
Read the whole file at its exact version.
How to install
mdr add deepaksinghcs14/deadeye-cc/deadeye-guard@sha256:3d8d75ef0d650eb9The line at the top of this page pins the label git:20261016.22a761d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ib6uwir44nsavull)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 13 versions of this file, between Sep 2, 2026 and Oct 16, 2026, about one every 4 days. Its first recorded version is graded A and its latest B.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261016.22a761d latest | 2026-10-16 | 22a761d | 11,970 B | B | view · diff |
| git:20260929.817b05c | 2026-09-29 | 817b05c | 11,643 B | B | view · diff |
| git:20260913.6752240 | 2026-09-13 | 6752240 | 11,009 B | B | view · diff |
| git:20260913.1a0680e | 2026-09-13 | 1a0680e | 11,104 B | B | view · diff |
| git:20260913.7ba69fd | 2026-09-13 | 7ba69fd | 11,084 B | B | view · diff |
| git:20260913.4ef468e | 2026-09-13 | 4ef468e | 11,125 B | B | view · diff |
| git:20260911.fe816ca | 2026-09-11 | fe816ca | 11,104 B | B | view · diff |
| git:20260909.51b5bf9 | 2026-09-09 | 51b5bf9 | 11,038 B | B | view · diff |
| git:20260904.f2cd552 | 2026-09-04 | f2cd552 | 10,680 B | B | view · diff |
| git:20260902.3a6be38 | 2026-09-02 | 3a6be38 | 8,452 B | B | view · diff |
| git:20260902.7c03b05 | 2026-09-02 | 7c03b05 | 8,276 B | B | view · diff |
| git:20260902.51473c6 | 2026-09-02 | 51473c6 | 7,658 B | B | view · diff |
| git:20260902.5fcd25e | 2026-09-02 | 5fcd25e | 5,631 B | A | view |
Audit of the latest version
- fail: No curl or wget piped into a shell (matched: curl | sh)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11970 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
deepaksinghcs14/deadeye-cc · 6 stars · license MIT · pushed 2026-10-31 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ib6uwir44nsavull GET https://markdownregistry.com/api/v1/resolve?ref=deepaksinghcs14/deadeye-cc/deadeye-guard GET https://markdownregistry.com/api/v1/blob/3d8d75ef0d650eb9a34c122fe07fe965728b80812d6f530f4e545d452a8dd86a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.