dev-script SKILL.md skillB
dev-script from j0ruge/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add j0ruge/skills/dev-script@v0.6.0Pins v0.6.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- j0ruge/skills
- Path
plugins/dev-script/skills/dev-script/SKILL.md- Versions recorded
- 5
- Latest version
- v0.6.0, committed Sep 28, 2026
- First version recorded
- Jun 11, 2026
- Size
- 17,658 bytes
- Repository stars
- 13
- License
- none declared
Generates idempotent dev.sh / dev.ps1 launchers for the current stack — Compose orchestration, healthchecks, two-strategy port handling (find-next-free for foreign-owned ports, kill-and-reclaim for own orphans), HTTPS-on-LAN via mkcert+Caddy, boot-time sanity check, Windows↔WSL migration guards. Triggers — dev script, single-command dev, mkcert, kill port, port discovery, script hangs, CRLF .env, native binding error.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# dev.script — Local Dev Stack Launcher Generator This skill produces a **single executable** (`dev.sh` for Linux/macOS, `dev.ps1` for Windows) that brings up the entire local development stack of the current project — containers, databases, APIs, frontend, IdP, and any bootstrap step — in one command. The generated script is **idempotent**, fails loudly with actionable messages, and cleans up after itself on Ctrl+C. It is not a generic init: each script is **shaped by what was detected in the project**. Sections that don't apply (e.g., TLS termination when there's no IdP) are not emitted, so the result stays minimal and readable. ## When to invoke this skill Use it whenever the user wants any of these outcomes — even if they don't say "dev.sh": - "Bring up the whole stack with one command" - "Make this work for new contributors / teammates" - "Let someone on my LAN hit the running app" - "Replace this 4-step `docker compose up` + `cd ... && npm run dev` ritual" - "Add a `dev.ps1` for the Windows folks on the team" - "We need an idempotent local boot — fresh clone should just work" …
Read the whole file at its exact version.
How to install
mdr add j0ruge/skills/dev-script@sha256:8605bed31b16066dThe line at the top of this page pins the label v0.6.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ieaeaspdis5pzu4k)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jun 11, 2026 and Sep 28, 2026, about one every 27 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v0.6.0 latest | 2026-09-28 | 9d3f8cb | 17,658 B | B | view · diff |
| v0.5.3 | 2026-09-03 | df3f2c7 | 17,388 B | B | view · diff |
| v0.5.2 | 2026-08-26 | f1e0931 | 17,501 B | B | view · diff |
| v0.5.1 | 2026-08-08 | 3d4c304 | 17,643 B | B | view · diff |
| v0.5.0 | 2026-06-11 | 38cc818 | 17,456 B | B | view |
Audit of the latest version
- fail: No instruction to read or print local credentials (matched: Read `.env)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (17658 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
j0ruge/skills · 13 stars · license none declared · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ieaeaspdis5pzu4k GET https://markdownregistry.com/api/v1/resolve?ref=j0ruge/skills/dev-script GET https://markdownregistry.com/api/v1/blob/8605bed31b16066d8970e8e60355883bfce58ad88edffd07b8090c99f719ce3e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.