hulk SKILL.md skillA
hulk from joetawil7/first-pass is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add joetawil7/first-pass/hulk@git:20261001.a4388faPins git:20261001.a4388fa in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- joetawil7/first-pass
- Path
skills/hulk/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261001.a4388fa, committed Oct 1, 2026
- Size
- 2,048 bytes
- Repository stars
- 107
- License
- MIT
Lifts the task's scope for one task. The session, its reviews and fix-the-class then look across the whole codebase and every repo that shares its code, data or vendors, and every problem found anywhere is handled by the usual rules. Runs only when the user types it.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# hulk The task: <task> $ARGUMENTS </task> If the task block above is empty or still shows a placeholder, the task is the text the user sent with this command, or, with none, the task the session is working on now. The user typed this to lift the rules' "Stay in the task's scope" for this one task. Until it is done: - **The scope is the whole codebase**: the repo, and in a main folder every repo the workspace section says shares its code, data or vendors. Reads, searches, the pre-mortem's neighbors, `fix-the-class`'s search and the reviews go wherever the problem leads. - **Problems found anywhere are findings**, handled as "Done means proven" and `ship-check` say: real harm the change caused or made worse is handled as they say (fixed at once, fixed in their one batch when only a rare path meets it, or first on the end list when that batch's review or a later one finds it), the rest goes on the one list at the end, older ones marked older. Nothing is marked "outside this task". - **A review of a pull request or a branch** with the scope lifted is `/first-pass:review hulk <what to review>`. …
Read the whole file at its exact version.
How to install
mdr add joetawil7/first-pass/hulk@sha256:b2d0617ed92d7ef0The line at the top of this page pins the label git:20261001.a4388fa, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_neu6y75rqlpgx5jl)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 1, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2048 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
joetawil7/first-pass · 107 stars · license MIT · pushed 2026-10-17 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_neu6y75rqlpgx5jl GET https://markdownregistry.com/api/v1/resolve?ref=joetawil7/first-pass/hulk GET https://markdownregistry.com/api/v1/blob/b2d0617ed92d7ef0a86e9572b5fe77be631d62fb77718eba88bbd4e1aa3eba3d
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.