agent-setup SKILL.md skillA
agent-setup from calebnewtonusc/chewbacca is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add calebnewtonusc/chewbacca/agent-setup@git:20260904.ee0eb1bPins git:20260904.ee0eb1b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- calebnewtonusc/chewbacca
- Path
skills/agent-setup/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260904.ee0eb1b, committed Sep 4, 2026
- First version recorded
- Sep 2, 2026
- Size
- 5,504 bytes
- Repository stars
- 9
- License
- MIT
Finish the parts of this kit's install that need a browser or a permission dialog: screen and accessibility grants, provider keys, any step behind a web console, and verification. Use after setup.sh, when doctor.sh reports a tool installed but unusable, or when the user says to finish setting something up themselves.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Agent setup `setup.sh` installs binaries. It cannot tick a checkbox in System Settings, click through a consent screen, or fill in a web console that has no API. This skill is how you finish those, so the user does not have to. Work through the checks first, do only what is actually missing, and end by running `./doctor.sh`. ## Before touching the GUI: is a person using this machine? Driving the mouse, the keyboard, or the browser while someone is mid-task will interrupt them and can capture what they are typing. **Check first, every time:** ```bash peekaboo list apps --json | head -40 # what is frontmost ``` Stop and ask if the frontmost window is a login page, a password field, a payment form, a video call, or anything you did not open. Say which window you saw and offer to continue when they are done. Never screenshot to find out whether it is safe: that is the capture you are trying to avoid. `peekaboo list` gives you titles without pixels. Prefer, in this order: 1. A CLI or an API. Always. 2. `chrome-js`, which reads and clicks through JavaScript. Deterministic, and it never captures the screen. 3. `peekaboo click` on a specific labeled element. …
Read the whole file at its exact version.
How to install
mdr add calebnewtonusc/chewbacca/agent-setup@sha256:1982f1e304578cbeThe line at the top of this page pins the label git:20260904.ee0eb1b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_og2577yiwhxjxjsk)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Sep 2, 2026 and Sep 4, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260904.ee0eb1b latest | 2026-09-04 | ee0eb1b | 5,504 B | A | view · diff |
| git:20260902.ba3a093 | 2026-09-02 | ba3a093 | 5,482 B | A | view · diff |
| git:20260902.45b9119 | 2026-09-02 | 45b9119 | 6,899 B | A | view · diff |
| git:20260902.f95c2e1 | 2026-09-02 | f95c2e1 | 6,809 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5504 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
calebnewtonusc/chewbacca · 9 stars · license MIT · pushed 2026-10-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_og2577yiwhxjxjsk GET https://markdownregistry.com/api/v1/resolve?ref=calebnewtonusc/chewbacca/agent-setup GET https://markdownregistry.com/api/v1/blob/1982f1e304578cbeb5ba0eb0843a6441402989b610799ac4235a41639ec68cf5
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.