audit-choices SKILL.md skillA
audit-choices from dzhng/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add dzhng/skills/audit-choices@git:20260813.dbb1aa5Pins git:20260813.dbb1aa5 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- dzhng/skills
- Path
skills/engineering/audit-choices/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260813.dbb1aa5, committed Aug 13, 2026
- First version recorded
- Jul 19, 2026
- Size
- 10,198 bytes
- Repository stars
- 1,377
- License
- MIT
Audit the choices an implementing agent made, not its diff — a pure decision audit that traces the session's history into a choices ledger, changes no code, and never blocks an unsupervised run. Working code still embeds architecture the user never chose; surface it because future work inherits it. Use when the user wants to review the decisions the AI made on their behalf, before merging or committing AI-implemented work, when integrating a delegated subagent's pass, or when a fix "works" but…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Audit Choices Given a good decision, an agent implements it faithfully; wherever the task is underspecified, it makes the decision itself — silently, and the diff won't flag it. Reviewing thousands of changed lines doesn't scale, and it inspects the execution, which was probably fine. The audit that scales is of the **choices**: surface every decision the implementer made on its own, judge that list, and record the verdicts. This is about architecture more than bugs. An implementation can work perfectly and still rest on decisions the user never made — a data shape, a storage location, a dependency, an API contract, a tradeoff of memory for speed — and every one of them is load-bearing for future work. The user needs to know them not because they're wrong, but because they now own them. This is purely a decision audit — it is not about modifying code, and it can be called at any time. The job is to **trace back**: walk every step this session has taken, and every step each subagent took (a live implementer traces its own; otherwise reconstruct from its reports, transcripts, and diffs), and surface every single decision that was made on the user's behalf …
Read the whole file at its exact version.
How to install
mdr add dzhng/skills/audit-choices@sha256:93410f8d91b538f4The line at the top of this page pins the label git:20260813.dbb1aa5, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ilzfq2ubmcg2rdj4)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jul 19, 2026 and Aug 13, 2026, about one every 6 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260813.dbb1aa5 latest | 2026-08-13 | dbb1aa5 | 10,198 B | A | view · diff |
| git:20260727.5ccd3f0 | 2026-07-27 | 5ccd3f0 | 11,050 B | A | view · diff |
| git:20260726.f7e315c | 2026-07-26 | f7e315c | 10,482 B | A | view · diff |
| git:20260719.cffc52f | 2026-07-19 | cffc52f | 9,410 B | A | view · diff |
| git:20260719.176981b | 2026-07-19 | 176981b | 8,281 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10198 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
dzhng/skills · 1,377 stars · license MIT · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ilzfq2ubmcg2rdj4 GET https://markdownregistry.com/api/v1/resolve?ref=dzhng/skills/audit-choices GET https://markdownregistry.com/api/v1/blob/93410f8d91b538f49836dfc891a1dd64844052ffa84376b8e78301f616aed03e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.