validation SKILL.md skillA
validation from projectbluefin/website is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add projectbluefin/website/validation@git:20261024.dfbf29bPins git:20261024.dfbf29b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- projectbluefin/website
- Path
docs/skills/validation/SKILL.md- Versions recorded
- 8
- Latest version
- git:20261024.dfbf29b, committed Oct 24, 2026
- First version recorded
- Aug 18, 2026
- Size
- 7,295 bytes
- Repository stars
- 10
- License
- none declared
Use when checking changes, staging files, pushing commits, or deciding whether production is live.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Validation ## Overview Choose checks that prove the changed behavior without claiming more than they prove. ## When to Use Use before completion reports, commits, pushes, deployment checks, or live-status claims. ## When NOT to Use Do not run the full application suite for documentation-only changes. ## Core Process 1. Match checks to changed paths. 2. Run `git diff --check`. 3. Inspect `git status --short` and the diff; classify unrelated dirty files before staging. 4. For deletions, search manifest, import, timeline, and generated-data references before committing. 5. Stage explicit paths only. 6. For a feature-branch push, verify PR CI/preview for the feature SHA. For a production claim after squash merge, verify the deployment for the merged `upstream/main` SHA and smoke-test the affected route in Chromium. 7. For workflow edits, ensure dependency installation steps in credentialed workflows (`deploy.yml`, `preview.yml`, `update-content.yml`) use `npm ci` rather than `npm install` to guarantee byte-for-byte fidelity with `package-lock.json`. …
Read the whole file at its exact version.
How to install
mdr add projectbluefin/website/validation@sha256:515d0c70fdd2e432The line at the top of this page pins the label git:20261024.dfbf29b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_lq4dni6z6mqzriz5)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 8 versions of this file, between Aug 18, 2026 and Oct 24, 2026, about one every 10 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261024.dfbf29b latest | 2026-10-24 | dfbf29b | 7,295 B | A | view · diff |
| git:20261002.e70360a | 2026-10-02 | e70360a | 6,928 B | A | view · diff |
| git:20260924.5e63742 | 2026-09-24 | 5e63742 | 6,624 B | A | view · diff |
| git:20260906.3343436 | 2026-09-06 | 3343436 | 5,927 B | A | view · diff |
| git:20260906.8277140 | 2026-09-06 | 8277140 | 6,226 B | A | view · diff |
| git:20260906.b5baf31 | 2026-09-06 | b5baf31 | 5,012 B | A | view · diff |
| git:20260819.e0b2fe2 | 2026-08-19 | e0b2fe2 | 4,555 B | A | view · diff |
| git:20260818.d62e081 | 2026-08-18 | d62e081 | 3,650 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7295 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
projectbluefin/website · 10 stars · license none declared · pushed 2026-10-31 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_lq4dni6z6mqzriz5 GET https://markdownregistry.com/api/v1/resolve?ref=projectbluefin/website/validation GET https://markdownregistry.com/api/v1/blob/515d0c70fdd2e432b8925027514fc086a957d1f62e89350a7c316eeb82adf4bb
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from projectbluefin/website
Every file in projectbluefin/website