source-scout SKILL.md skillA
source-scout from gtapps/hermitd is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add gtapps/hermitd/source-scout@git:20261002.2f2da1bPins git:20261002.2f2da1b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- gtapps/hermitd
- Path
plugins/hermitd-feed/skills/source-scout/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261002.2f2da1b, committed Oct 2, 2026
- Size
- 5,144 bytes
- Repository stars
- 82
- License
- MIT
Gap-driven discovery of new RSS/web sources for feed-sources.md. Interactive runs WebFetch-verify candidates and auto-add them; --scheduled runs queue unverified candidates for operator review (no WebFetch, per the domain-allowlist rule). Complements source-health (removal) with discovery (addition). Invoke with /hermitd-feed:source-scout.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Source Scout Proactively discover and add new RSS/web sources to `feed-sources.md`. Complements `source-health` (removal) with discovery (addition). Runs as the `source-scout` routine with `hermitd-feed:source-scout --scheduled`. ## Flags - `--scheduled`: invoked by its routine (non-interactive, no operator present). The security rule restricting automated WebFetch to domains already in `feed-sources.md` means the step-3 verification fetch cannot run — candidates are queued **unverified** for operator review instead of being auto-added. - No flag (default): interactive/on-demand (operator ran `/source-scout`). Full behavior — verify and auto-add — since the operator's live presence satisfies the security rule's intent. ## Steps 1. **Read current state** (in parallel): - `feed-sources.md` — extract active source names, URLs, categories. Count sources per category. - `feed-categories.md` — all P1/P2 categories and their priorities. - Glob `.hermit/compiled/story-arcs-*.md`, read the most recent. Extract Watch-clause keywords from each active arc under `## Active`. 2. **Identify gaps:** …
Read the whole file at its exact version.
How to install
mdr add gtapps/hermitd/source-scout@sha256:f53cc013e5ae34e0The line at the top of this page pins the label git:20261002.2f2da1b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_mtqjkazyjboofatx)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 2, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5144 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
gtapps/hermitd · 82 stars · license MIT · pushed 2026-10-22 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_mtqjkazyjboofatx GET https://markdownregistry.com/api/v1/resolve?ref=gtapps/hermitd/source-scout GET https://markdownregistry.com/api/v1/blob/f53cc013e5ae34e06d7e100d93f6fa4f13e949f930eb6b29381da81512e32ec2
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.