product-audit SKILL.md skillA
product-audit from gtrabanco/agentic-workflow is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add gtrabanco/agentic-workflow/product-audit@v4.10.0Pins v4.10.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- gtrabanco/agentic-workflow
- Path
skills/product-audit/SKILL.md- Versions recorded
- 18
- Latest version
- v4.10.0, committed Nov 3, 2026
- First version recorded
- Aug 3, 2026
- Size
- 12,372 bytes
- Repository stars
- 23
- License
- MIT
Audit the whole product across code, quality, process, docs, roadmap, and tooling; it owns the repo-wide bug hunt, security research, and broken-version investigation (scoped and budgeted per dimension, as distinct from `review-change`'s change-scoped review). Persist one severity-ranked, F-numbered report with proposals; never fix or file work. Triggers: "product-audit", "audit the product", "full health check", "are we product-ready", "CTO review".
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Product Audit Product-wide health check. It only writes `docs/audits/<n>-<YYYY-MM-DD>.md`; every proposed action remains a user decision. ## Turn contract — verify before ending the turn ``` ✓ The full PRODUCT AUDIT report was printed in the fixed output format (health by dimension, F-numbered ranked findings, four proposal streams — the roadmap streams always present, `none — <why>` when empty) ✓ The report was WRITTEN to `docs/audits/<n>-<YYYY-MM-DD>.md` (incremental audit id) and committed — the file is the durable deliverable, the chat print is a copy ✓ Nothing else was fixed, filed, or changed — the report file is the ONLY mutation ✓ The closing `→ Next:` block is printed as the ABSOLUTE last output ``` About to end the turn with any box unchecked? The turn is NOT done — complete the missing box first (weak models drop end-of-document duties; this list is first on purpose). ## When to use - Periodically (every few features) or at a product-ready milestone. - When you want the broad, honest picture — quality, security, debt, docs, and roadmap — not the review of a single change (`review-change`) or PR (`audit-pr`). …
Read the whole file at its exact version.
How to install
mdr add gtrabanco/agentic-workflow/product-audit@sha256:d2aaa98268ff58e3The line at the top of this page pins the label v4.10.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_lihckagnng6sofx6)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 18 versions of this file, between Aug 3, 2026 and Nov 3, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v4.10.0 latest | 2026-11-03 | 9b07f8e | 12,372 B | A | view · diff |
| v4.10.0 | 2026-11-02 | 8b76cc5 | 12,323 B | A | view · diff |
| v4.10.0 | 2026-10-30 | db72144 | 11,909 B | A | view · diff |
| v4.10.0 | 2026-10-30 | 47fd9fd | 11,702 B | A | view · diff |
| v3.4.0 | 2026-10-01 | 29906f6 | 11,701 B | A | view · diff |
| v3.4.0 | 2026-10-01 | f6c9a30 | 11,604 B | A | view · diff |
| v3.3.0 | 2026-10-01 | 1bf0887 | 11,604 B | A | view · diff |
| v3.3.0 | 2026-09-24 | b7b74e0 | 11,195 B | A | view · diff |
| v3.2.1 | 2026-09-21 | 1589dd2 | 11,180 B | A | view · diff |
| v3.2.0 | 2026-09-21 | 087b206 | 11,180 B | A | view · diff |
| v3.2.0 | 2026-09-21 | acc45ff | 11,172 B | A | view · diff |
| v3.2.0 | 2026-09-21 | 18ae639 | 11,178 B | A | view · diff |
| v3.1.0 | 2026-09-21 | 57ff05a | 11,178 B | A | view · diff |
| v3.1.0 | 2026-08-27 | 0e87e70 | 11,141 B | A | view · diff |
| v3.0.3 | 2026-08-27 | 101b53c | 11,141 B | A | view · diff |
| v3.0.3 | 2026-08-27 | f4b79d9 | 11,133 B | A | view · diff |
| v3.0.3 | 2026-08-10 | e00b610 | 10,999 B | A | view · diff |
| v3.0.2 | 2026-08-03 | 7383510 | 10,763 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (12372 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
gtrabanco/agentic-workflow · 23 stars · license MIT · pushed 2026-11-07 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_lihckagnng6sofx6 GET https://markdownregistry.com/api/v1/resolve?ref=gtrabanco/agentic-workflow/product-audit GET https://markdownregistry.com/api/v1/blob/d2aaa98268ff58e34bfae3d58c2d36ebbd4937182e7b86e708441b480733b7a3
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from gtrabanco/agentic-workflow
Every file in gtrabanco/agentic-workflow