token-check SKILL.md skillA
token-check from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add devcodex-labs/devcodex/token-check@git:20260730.6ee304aPins git:20260730.6ee304a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- devcodex-labs/devcodex
- Path
content/skills/token-check/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260730.6ee304a, committed Jul 30, 2026
- Size
- 803 bytes
- Repository stars
- 432
- License
- AGPL-3.0
授权占位规范 — 当前所有功能全量开放，无 tier 限制。Tier 门控为预留功能。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Token Check Skill > ℹ️ **当前状态**：授权门控尚未启用（**占位 Skill / FIX-22 可选不部署**）。所有工作流及子类型对所有用户全量开放，无需 Token。 > > 未来版本将通过 `plugin.json.authentication` + `DEVCODEX_TOKEN` 环境变量实现服务端 tier 校验，届时本文件将扩展为完整的门控规范。三宿主 init **可不部署**本 Skill，直至 tier 门控启用。 ## 当前行为 - 无 Token 检查 - 所有工作流子类型（dev-database / fix-security / audit-project / self-fix / resume 等）均可直接使用 - `DEVCODEX_TOKEN` 环境变量当前无效（保留供未来接入）
Read the whole file at its exact version.
How to install
mdr add devcodex-labs/devcodex/token-check@sha256:5e52887da96137e7The line at the top of this page pins the label git:20260730.6ee304a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_lwqd7kfcikwfppha)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jul 30, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (803 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_lwqd7kfcikwfppha GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/token-check GET https://markdownregistry.com/api/v1/blob/5e52887da96137e707636847e9456e675c9fc1c11ae2ff4d12252245dad90d72
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from devcodex-labs/devcodex
Every file in devcodex-labs/devcodex