audit SKILL.md skillA
audit from openreachtech/hora-skills-ort-renchan is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add openreachtech/hora-skills-ort-renchan/audit@git:20260906.411ca02Pins git:20260906.411ca02 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- openreachtech/hora-skills-ort-renchan
- Path
.claude/skills/audit/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260906.411ca02, committed Sep 6, 2026
- First version recorded
- Sep 2, 2026
- Size
- 6,739 bytes
- Repository stars
- 32
- License
- Apache-2.0
Repository-specific check that every skill sits directly under kit/skills/, carries its `hor-` prefix, and declares a `name:` equal to its own folder name, and that both skill catalogs carry a row for every one of them and a row for nothing else — the layout rules the build aborts on plus the catalogs, reported all at once with a non-zero exit for CI. Use before committing a new, renamed or moved skill. It reports only; it renames and moves nothing, it checks no frontmatter field other than…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Audit A skill's folder name is its `name:` and the folder name it is installed under — one string, three places. Consuming repositories install every skill of this library, and of its sibling libraries, side by side under `.claude/skills/`, so all of those names live in **one flat namespace**, and the source layout is what protects it: one level of skill folders directly under `kit/skills/`, the `hor-` prefix that no sibling library uses, and a filesystem that will not hold two folders of one name in one directory. That protection is only as real as the layout. A skill placed one directory deeper, a `name:` edited without renaming its folder, a folder renamed without editing `name:` — none of these look wrong in the file they occur in, and each breaks the one guarantee the whole scheme rests on. This audit makes the state of the layout visible from outside any single file. ## What is checked For every entry directly under `kit/skills/`: - **An entry under `kit/skills/` that is not a directory, or a directory with no `SKILL.md` directly inside it, is a failure.** Only skill folders belong there, and a folder with no `SKILL.md` installs nothing. …
Read the whole file at its exact version.
How to install
mdr add openreachtech/hora-skills-ort-renchan/audit@sha256:03e2ef15d630bc8eThe line at the top of this page pins the label git:20260906.411ca02, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_p4wuucvkwr5mf52v)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 2, 2026 and Sep 6, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260906.411ca02 latest | 2026-09-06 | 411ca02 | 6,739 B | A | view · diff |
| git:20260906.3647eae | 2026-09-06 | 3647eae | 6,806 B | A | view · diff |
| git:20260905.6dd2da6 | 2026-09-05 | 6dd2da6 | 7,370 B | A | view · diff |
| git:20260905.8dcf691 | 2026-09-05 | 8dcf691 | 6,879 B | A | view · diff |
| git:20260902.12ea69e | 2026-09-02 | 12ea69e | 7,394 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6739 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
openreachtech/hora-skills-ort-renchan · 32 stars · license Apache-2.0 · pushed 2026-10-16 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_p4wuucvkwr5mf52v GET https://markdownregistry.com/api/v1/resolve?ref=openreachtech/hora-skills-ort-renchan/audit GET https://markdownregistry.com/api/v1/blob/03e2ef15d630bc8e90e04e91a241fde30ee87981a6af474552b8eb934b7d1fee
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from openreachtech/hora-skills-ort-renchan
Every file in openreachtech/hora-skills-ort-renchan