ripwire-mcp SKILL.md skillA

ripwire-mcp from redhat-et/ripwire is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add redhat-et/ripwire/ripwire-mcp@git:20261106.c3a4d07

Pins git:20261106.c3a4d07 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
redhat-et/ripwire
Path
skills/ripwire-mcp/SKILL.md
Versions recorded
23
Latest version
git:20261106.c3a4d07, committed Nov 6, 2026
First version recorded
Aug 30, 2026
Size
22,754 bytes
Repository stars
2,530
License
Apache-2.0

Wire ripwire into an agent as an MCP server — `ripwire wrap AGENT` (Claude Code, Cursor, Codex, Gemini…) — and choose the server verb mid-task. Also tool HEALTH: a symbol you expected is missing from the ranked output, the index feels stale after a rebase, 'is my ripwire setup broken?'.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# ripwire as an MCP server

> Auditing somebody's `.mcp.json` for safety instead → **ripwire-security-scan**.

Trigger: "wire ripwire into my agent", "set up the ripwire MCP server", or "which ripwire MCP verb
answers this?".

**The 33 verbs, at a glance**: 17 read verbs (`analyze`, `rank_by` — the same map, ranked by
authority/hub/rrf instead of plain PageRank — `for`, `find_symbol`,
`find_referencing_symbols`, `grep`, `cochange`, `memory_recall`, `situational_awareness`, `mentions`,
`owners`, `lego`, `batch` — N read sub-queries in ONE call — `fetch_body`, and `flags` — what is BUILT but
DARK here: every compile / CMake `option()` / `getenv` gate with its default and the size of the code it
guards, the answer to "why don't I see feature X?", and `doc_drift` — which of the repo's markdown claims
are now FALSE: dead `file:line` anchors, deleted symbols, `= N` constants and `[N]` extents the code has
since changed; call it before trusting a design doc or audit you did not just write, and `slice` — per-line
def-use rows of ONE variable inside ONE definition, `flow=back|fwd|both` for the transitive data-flow
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add redhat-et/ripwire/ripwire-mcp@sha256:f58fe5635577fd44

The line at the top of this page pins the label git:20261106.c3a4d07, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_n4j4rkkio2uwedot.svg)](https://markdownregistry.com/a/art_n4j4rkkio2uwedot)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 23 versions of this file, between Aug 30, 2026 and Nov 6, 2026, about one every 3 days.

versioncommittedcommitsizeaudit
git:20261106.c3a4d07 latest2026-11-06 c3a4d07 22,754 BA view · diff
git:20261030.97885f42026-10-30 97885f4 22,754 BA view · diff
git:20261029.0660c122026-10-29 0660c12 22,542 BA view · diff
git:20261029.e8147542026-10-29 e814754 22,522 BA view · diff
git:20261008.ec5a1022026-10-08 ec5a102 22,167 BA view · diff
git:20261008.c7920352026-10-08 c792035 22,167 BA view · diff
git:20261008.219aaaa2026-10-08 219aaaa 21,909 BA view · diff
git:20260928.24d72f92026-09-28 24d72f9 21,714 BA view · diff
git:20260928.cc21d942026-09-28 cc21d94 21,619 BA view · diff
git:20260920.149e7312026-09-20 149e731 21,048 BA view · diff
git:20260920.724b9d02026-09-20 724b9d0 20,323 BA view · diff
git:20260919.264f0d72026-09-19 264f0d7 20,833 BA view · diff
git:20260917.b2514bd2026-09-17 b2514bd 20,108 BA view · diff
git:20260914.ef5f62c2026-09-14 ef5f62c 19,288 BA view · diff
git:20260914.f2420912026-09-14 f242091 19,231 BA view · diff
git:20260913.6130e3f2026-09-13 6130e3f 19,002 BA view · diff
git:20260913.66213702026-09-13 6621370 19,202 BA view · diff
git:20260913.88355ac2026-09-13 88355ac 19,001 BA view · diff
git:20260908.8dfd7382026-09-08 8dfd738 18,945 BA view · diff
git:20260907.9e1e9f92026-09-07 9e1e9f9 18,917 BA view · diff
git:20260905.cec68c82026-09-05 cec68c8 19,310 BA view · diff
git:20260831.0ab207e2026-08-31 0ab207e 18,793 BA view · diff
git:20260830.d0976a82026-08-30 d0976a8 18,574 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (22754 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

redhat-et/ripwire · 2,530 stars · license Apache-2.0 · pushed 2026-11-07 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_n4j4rkkio2uwedot
GET https://markdownregistry.com/api/v1/resolve?ref=redhat-et/ripwire/ripwire-mcp
GET https://markdownregistry.com/api/v1/blob/f58fe5635577fd44177c49a7c2cf22e419d6b6a1f643cfa8a39e4bf43e2562e1

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from redhat-et/ripwire

emitting-output SKILL.md skill
redhat-et/ripwire · .claude/skills/emitting-output/SKILL.md · Writing or converting formatted output in ripwire's C++ source — std::print/std::format via rw::emitTo, emitRaw and…
git:20260910.b46909b · audit A · 2,530 stars
AGENTS.md AGENTS.md file
redhat-et/ripwire · AGENTS.md
git:20260925.02fad65 · audit A · 2,530 stars
CLAUDE.md CLAUDE.md file
redhat-et/ripwire · CLAUDE.md
git:20260925.02fad65 · audit A · 2,530 stars
ripwire-repo-map SKILL.md skill
redhat-et/ripwire · skills/hermes/ripwire-repo-map/SKILL.md · Use ripwire CLI to map a repo before reading it.
v1.0.0 · audit A · 2,530 stars
ripwire-before-you-build SKILL.md skill
redhat-et/ripwire · skills/ripwire-before-you-build/SKILL.md · Starting a FEATURE (multi-symbol work): the plan, the API boundary, the scope — how big does this change get — from the…
git:20260913.30a5a3c · audit A · 2,530 stars
ripwire-change-check SKILL.md skill
redhat-et/ripwire · skills/ripwire-change-check/SKILL.md · Merge-SAFETY of an existing diff — yours before you push, or a PR you review: blast radius, tests to run, a broken…
git:20261015.fde5074 · audit A · 2,530 stars
ripwire-find-bug SKILL.md skill
redhat-et/ripwire · skills/ripwire-find-bug/SKILL.md · You have a SYMPTOM — crash, exception, wrong output, failing test, error string — and don't know which code is…
git:20260914.d09bb1b · audit A · 2,530 stars
ripwire-fresh-eyes SKILL.md skill
redhat-et/ripwire · skills/ripwire-fresh-eyes/SKILL.md · Maintenance risk in code you did NOT write — inheriting a module, planning a refactor, a suspected god object, 'what's…
git:20261007.d4da24e · audit A · 2,530 stars
ripwire-graph-query SKILL.md skill
redhat-et/ripwire · skills/ripwire-graph-query/SKILL.md · A call-graph question the fixed verbs can't phrase — 'which high-complexity functions can reach X?', 'what has 10+…
git:20260913.30a5a3c · audit A · 2,530 stars
ripwire-handoff SKILL.md skill
redhat-et/ripwire · skills/ripwire-handoff/SKILL.md · Brief someone ELSE on a subsystem — 'hand this area off' to a successor, teammate or fresh session: purpose, the 2-3…
git:20261009.455b2c7 · audit A · 2,530 stars
ripwire-layers SKILL.md skill
redhat-et/ripwire · skills/ripwire-layers/SKILL.md · Architecture HEALTH and ENFORCEMENT — 'is this a dependency mess / does the UI reach into the database / enforce module…
git:20261031.5b44124 · audit A · 2,530 stars
ripwire-navigate SKILL.md skill
redhat-et/ripwire · skills/ripwire-navigate/SKILL.md · You can NAME the symbol: who calls it, what it calls, the path from A to B, its full body, or an exact literal/regex…
git:20261028.de9d903 · audit A · 2,530 stars

Every file in redhat-et/ripwire

Browse by kind, by grade A, or by owner.