ch015-verifier SKILL.md skillA
ch015-verifier from ch015/code-pentester is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add ch015/code-pentester/ch015-verifier@git:20261014.04e275ePins git:20261014.04e275e in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- ch015/code-pentester
- Path
skills/ch015/offsec/verifier/SKILL.md- Versions recorded
- 7
- Latest version
- git:20261014.04e275e, committed Oct 14, 2026
- First version recorded
- Jun 11, 2026
- Size
- 10,237 bytes
- Repository stars
- 4
- License
- MIT
Run CH015 adversarial verification workflows to independently validate security reports, recheck file-line evidence, find false positives, severity errors, missed findings, and dependencies.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 독립 검증 (Adversarial Verification) Skill
> 보안 진단 보고서를 독립적으로 검증하여 오탐, 심각도 오류,
> 누락된 Finding, Finding 간 의존성을 식별합니다.
---
## 서비스 개요
| 항목 | 내용 |
|------|------|
| 서비스명 | 독립 검증 (Adversarial Verification) |
| 방법론 | 증거 재검증 + 교차 의존성 분석 + 심각도 민감도 분석 |
| 출력물 | 검증 보고서 (증거 감사 + 의존성 그래프 + 심각도 재평가 + 누락 탐색) |
| 코드 수정 | ❌ 없음 (읽기 전용) |
| 입력 | VA/Pentest/Red Team 보고서 + 대상 소스코드 |
---
## 설계 원칙
### 독립성 원칙
```yaml
Principles:
Independent_Context: |
"원본 보고서를 생성한 분석과 별도 세션에서 실행한다.
이전 분석의 가정에 오염되지 않은 상태에서 증거를 재검증한다."
Challenger_Stance: |
"모든 판단(위험 판단과 안전 판단 모두)을 의심한다.
보고서의 결론을 수용하지 않고, 증거로부터 독립적으로 결론을 도출한다.
원본 보고서와 동일한 결론에 도달하더라도 그 과정이 증거 기반이어야 한다."
No_Library_Assumptions: |
"라이브러리의 존재, 이름, 일반적 평판으로 보안 속성을 추론하지 않는다.
프로젝트의 실제 설정과 resolved version의 라이브러리 소스/공식 문서로
적용되는 기본 보안 속성까지 확인한다. 옵션 생략만으로 방어 부재를 판단하지 않는다.
버전이나 적용 조건을 확인하지 못하면 unknown과 후속 확인 작업을 남긴다."
Severity_Is_Contextual: |
"심각도는 고정값이 아니라 다른 Finding과의 관계에 의해 변동한다.
Finding A의 해소가 Finding B의 심각도에 영향을 줄 수 있다.
이 의존성을 명시적으로 식별하고 기록한다."
```
---
## Phase 구조 (v2 — 4-Phase 통합, P1-3)
```
Phase R0-sealed : Context Binding (봉인) → target/engagement 경로만 수령, VA 보고서 경로는 봉인
…Read the whole file at its exact version.
How to install
mdr add ch015/code-pentester/ch015-verifier@sha256:e73d83a8dd95d41dThe line at the top of this page pins the label git:20261014.04e275e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_kiief4vnge52ug6z)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 7 versions of this file, between Jun 11, 2026 and Oct 14, 2026, about one every 21 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261014.04e275e latest | 2026-10-14 | 04e275e | 10,237 B | A | view · diff |
| git:20260923.5ec082e | 2026-09-23 | 5ec082e | 10,047 B | A | view · diff |
| git:20260909.197393e | 2026-09-09 | 197393e | 9,609 B | A | view · diff |
| git:20260908.452d6f7 | 2026-09-08 | 452d6f7 | 9,598 B | A | view · diff |
| git:20260624.02c70cd | 2026-06-24 | 02c70cd | 51,172 B | A | view · diff |
| git:20260622.3305143 | 2026-06-22 | 3305143 | 50,784 B | A | view · diff |
| git:20260611.cba86fb | 2026-06-11 | cba86fb | 50,486 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10237 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
ch015/code-pentester · 4 stars · license MIT · pushed 2026-10-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_kiief4vnge52ug6z GET https://markdownregistry.com/api/v1/resolve?ref=ch015/code-pentester/ch015-verifier GET https://markdownregistry.com/api/v1/blob/e73d83a8dd95d41dd77255577c32ecce0ab520913043cd3ec9676732d412557c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.