refactoring-the-assembled-ui SKILL.md skillC
refactoring-the-assembled-ui from aleksandarbisevac/claude-plugins is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add aleksandarbisevac/claude-plugins/refactoring-the-assembled-ui@git:20261021.c403486Pins git:20261021.c403486 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- C, 15 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- aleksandarbisevac/claude-plugins
- Path
.claude/skills/refactoring-the-assembled-ui/SKILL.md- Versions recorded
- 8
- Latest version
- git:20261021.c403486, committed Oct 21, 2026
- First version recorded
- Aug 20, 2026
- Size
- 27,037 bytes
- Repository stars
- 4
- License
- MIT
Edit, split or share the CSS and JavaScript under plugins/audit/scripts/ui/ — files Python concatenates into one inline <style> and one inline <script> carrying code, in a self-contained page opened over file://. Covers the assembly contract and the byte-level pins in tests/ that guard it, why the split must be an order-preserving cut rather than a regrouping, the index-slice assertions that make section-marker comments load-bearing, the counts that currently enforce duplication, choosing a…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Refactoring the assembled UI
`scripts/ui/` does not hold standalone files. It holds **ordered parts of one artifact**.
`_report_ui.py`, `_panel_ui.py` and `panel-server.py` read them at import and join them into a
single self-contained HTML page. Almost every surprise in this area comes from forgetting that.
## The assembly contract
- **One inline `<style>`, and one inline `<script>` *carrying code*.** The tags live in the Python
modules, never in the assets — selftests pin both, and pin that the `.js` files carry no
`<script>` tags of their own.
*Carrying code* is not hedging. The panel emits one of each; **the shipped report emits three
`<script>` tags** — `window.AUDIT_USAGE` (2.6 KB of data), `window.AUDIT_MD_B64` (the 6.9 KB
base64 Markdown twin), and the code (81 KB). Check the artifact, not this sentence:
`grep -c '<script' examples/acme-store/acme-store-audit.html` prints 3.
The pin that reads `SCRIPT.count("<script>") == 1` counts tags in a **Python string** — the code
block alone — not in the page. It has never contradicted the above, which is exactly why the
…Read the whole file at its exact version.
How to install
mdr add aleksandarbisevac/claude-plugins/refactoring-the-assembled-ui@sha256:7c9faea3d349dea3The line at the top of this page pins the label git:20261021.c403486, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_nlcfht2gzapnxcjk)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 8 versions of this file, between Aug 20, 2026 and Oct 21, 2026, about one every 9 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261021.c403486 latest | 2026-10-21 | c403486 | 27,037 B | C | view · diff |
| git:20261021.9a7674a | 2026-10-21 | 9a7674a | 27,025 B | C | view · diff |
| git:20261019.1b5a047 | 2026-10-19 | 1b5a047 | 27,095 B | C | view · diff |
| git:20260825.86e58ef | 2026-08-25 | 86e58ef | 27,116 B | C | view · diff |
| git:20260823.04782fb | 2026-08-23 | 04782fb | 26,831 B | C | view · diff |
| git:20260823.086731e | 2026-08-23 | 086731e | 24,946 B | C | view · diff |
| git:20260822.56622f0 | 2026-08-22 | 56622f0 | 23,806 B | C | view · diff |
| git:20260820.05db2b8 | 2026-08-20 | 05db2b8 | 23,896 B | C | view |
Audit of the latest version
- fail: No link to a raw IP address (matched: http://127.0.0.1)
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (27037 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
aleksandarbisevac/claude-plugins · 4 stars · license MIT · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_nlcfht2gzapnxcjk GET https://markdownregistry.com/api/v1/resolve?ref=aleksandarbisevac/claude-plugins/refactoring-the-assembled-ui GET https://markdownregistry.com/api/v1/blob/7c9faea3d349dea39acb8d0098d2c8e3ab99b72be59e2a375c8e900667043da2
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.