Home / mixocreative / ecommerce-cia · GitHub

ecommerce-cia SKILL.md skillC

ecommerce-cia from mixocreative/ecommerce-cia is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add mixocreative/ecommerce-cia/ecommerce-cia@git:20261022.26a32b7

Pins git:20261022.26a32b7 in mdr.lock. Pin the fingerprint instead.

Audit grade
C, 15 of 17 checks passed
Kind
SKILL.md skill
Repository
mixocreative/ecommerce-cia
Path
SKILL.md
Versions recorded
28
Latest version
git:20261022.26a32b7, committed Oct 22, 2026
First version recorded
Sep 12, 2026
Size
129,261 bytes
Repository stars
14
License
MIT

Use when auditing transactional e-commerce: checkout, orders, payments, gateway callbacks, inventory, fulfilment, pickup, refunds, promotions, tax/invoices, digital entitlements, settlement, reconciliation, consumer-law/privacy compliance, legal pages, subscriptions, or setting up a gateway from zero. Also use when commerce projects hear pre-launch, run tests, handoff, green-light, ready to ship, audit, security audit, wiring audit, nothing dies silently, dead control, fail-open, vacuous pass…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# SKILL: ecommerce-cia — Commerce Integrity Auditor

An audit skill for transactional commerce systems. Its primary target is **cross-boundary invariant violations** — integration-level, emergent defects where every function is individually correct and the defect lives in the channel between two of them. The theory is Stafford Beer's Viable System Model; the method is a map of the codebase onto Systems 1–5 and then twenty-four sweeps along that map's channels; the standard is that **nothing dies silently**.

This file holds routing, discovery, the seven-step protocol, the autonomy contract, the sweep index, escalation and the reference index. The doctrine itself lives in `references/` and is loaded per the table in §0.13 — read those files in full when the protocol reaches them; they are the audit, this file is the runbook.

> **THE FIRST LAW OF THIS AUDIT: NOTHING DIES SILENTLY.**
> In the owner's four words, which every sweep below is a special case of: *"Nothing should die silently!!"*
>
> Every sweep answers one question — **when this goes wrong, who finds out, and how?** In a
> shop the answer has a fixed address, given by the same owner: *"anything system cannot handle
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add mixocreative/ecommerce-cia/ecommerce-cia@sha256:d46d37c3222f187d

The line at the top of this page pins the label git:20261022.26a32b7, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_p2w5y2prgrruxru5.svg)](https://markdownregistry.com/a/art_p2w5y2prgrruxru5)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 28 versions of this file, between Sep 12, 2026 and Oct 22, 2026, about one every day. Its first recorded version is graded A and its latest C.

versioncommittedcommitsizeaudit
git:20261022.26a32b7 latest2026-10-22 26a32b7 129,261 BC view · diff
git:20261021.fd671fc2026-10-21 fd671fc 125,038 BC view · diff
git:20261021.e4225af2026-10-21 e4225af 121,808 BC view · diff
git:20261014.3ffd9e32026-10-14 3ffd9e3 116,357 BC view · diff
git:20261012.3bd2ce92026-10-12 3bd2ce9 112,040 BC view · diff
git:20261012.676b3542026-10-12 676b354 105,529 BB view · diff
git:20261012.08e44f52026-10-12 08e44f5 103,248 BB view · diff
git:20261012.08981d72026-10-12 08981d7 99,884 BB view · diff
git:20261008.c38b58d2026-10-08 c38b58d 97,716 BB view · diff
git:20261007.b999d8d2026-10-07 b999d8d 89,353 BB view · diff
git:20260926.665a5bf2026-09-26 665a5bf 84,012 BB view · diff
git:20260926.03f0c462026-09-26 03f0c46 83,285 BB view · diff
git:20260924.6bcecea2026-09-24 6bcecea 83,067 BB view · diff
git:20260924.8c930542026-09-24 8c93054 82,830 BB view · diff
git:20260924.6135e1e2026-09-24 6135e1e 79,672 BB view · diff
git:20260924.6e9d4932026-09-24 6e9d493 77,090 BB view · diff
git:20260924.f7d98972026-09-24 f7d9897 73,487 BB view · diff
git:20260919.0b96d5a2026-09-19 0b96d5a 68,928 BB view · diff
git:20260918.52264762026-09-18 5226476 67,829 BB view · diff
git:20260916.04311602026-09-16 0431160 65,669 BA view · diff
git:20260916.450c0d72026-09-16 450c0d7 65,495 BA view · diff
git:20260916.fca49062026-09-16 fca4906 65,364 BA view · diff
git:20260915.e208d8b2026-09-15 e208d8b 65,329 BA view · diff
git:20260914.ebf25022026-09-14 ebf2502 64,872 BA view · diff
git:20260912.65ae3f02026-09-12 65ae3f0 64,202 BA view · diff
git:20260912.5c1ab3a2026-09-12 5c1ab3a 64,155 BA view · diff
git:20260912.59fa11a2026-09-12 59fa11a 64,077 BA view · diff
git:20260912.d74408b2026-09-12 d74408b 63,930 BA view

Audit of the latest version

C  15 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • fail: No instruction to read or print local credentials (matched: read `.env)
  • fail: No script tag (matched: <script)
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (129261 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address

Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.

Source

GitHub

mixocreative/ecommerce-cia · 14 stars · license MIT · pushed 2026-10-22 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_p2w5y2prgrruxru5
GET https://markdownregistry.com/api/v1/resolve?ref=mixocreative/ecommerce-cia/ecommerce-cia
GET https://markdownregistry.com/api/v1/blob/d46d37c3222f187d71f703a0bcb75a8d3697c968392206a08cd5e8af086e95bc

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade C, or by owner.