static-analysis SKILL.md skillA

static-analysis from kdy1/kdy1-scripts is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add kdy1/kdy1-scripts/static-analysis@git:20261009.007d183

Pins git:20261009.007d183 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
kdy1/kdy1-scripts
Path
skills/static-analysis/SKILL.md
Versions recorded
1
Latest version
git:20261009.007d183, committed Oct 9, 2026
Size
3,638 bytes
Repository stars
32
License
none declared

Analyze all code in a user-specified scope, or the whole repository when scope is omitted, and hand each confirmed bug to $add-issue immediately. Use for requested comprehensive static bug analysis; issue recording requires a direct human invocation of $static-analysis or an explicit request to run Static Analysis.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Static Analysis

## Prompt

`<Scope>`에 대한 모든 코드를 정적 분석하고 모든 버그를 찾아 각각 `$add-issue`로 등록해. 이슈를 모으지 말고 확인되는 대로 바로바로 등록해. `<Scope>`는 사용자가 지정하며, 생략하면 코드 전체를 대상으로 해.

## Scope and authorization

- Resolve the target repository from the user's request or current checkout. Treat `<Scope>` as the user's analysis boundary, not a literal path. If omitted, analyze all code in that repository.
- Read applicable repository instructions and map the code covered by the scope. Read related contracts, configuration, tests, and callers. Read outside the scope only as needed to establish behavior and causes for in-scope defects.
- A direct human invocation of `$static-analysis` or an explicit request to run Static Analysis authorizes this analysis run and `$add-issue` handoffs for bugs found within its scope. Automatic skill selection alone does not authorize issue recording.
- Preserve narrower user restrictions, including draft-only reporting. Creating, editing, planning, or testing this skill does not start analysis or issue recording.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add kdy1/kdy1-scripts/static-analysis@sha256:bd97ffa4bcb91a5a

The line at the top of this page pins the label git:20261009.007d183, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_p6s2665m644wp5dj.svg)](https://markdownregistry.com/a/art_p6s2665m644wp5dj)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 9, 2026.

versioncommittedcommitsizeaudit
git:20261009.007d183 latest2026-10-09 007d183 3,638 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (3638 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

kdy1/kdy1-scripts · 32 stars · license none declared · pushed 2026-10-20 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_p6s2665m644wp5dj
GET https://markdownregistry.com/api/v1/resolve?ref=kdy1/kdy1-scripts/static-analysis
GET https://markdownregistry.com/api/v1/blob/bd97ffa4bcb91a5afc9e1f214ebaf229130136cac8995dedc04dad2a33c1e2e4

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from kdy1/kdy1-scripts

AGENTS.md AGENTS.md file
kdy1/kdy1-scripts · AGENTS.md
git:20261011.83210f0 · audit A · 32 stars
add-issue SKILL.md skill
kdy1/kdy1-scripts · skills/add-issue/SKILL.md · Investigate explicitly requested work in the local environment by default, inspect relevant logs, repair confirmed…
git:20261014.a2ef13b · audit A · 32 stars
bulk-watch SKILL.md skill
kdy1/kdy1-scripts · skills/bulk-watch/SKILL.md · Watch a user-specified source and apply one common prompt to existing and newly discovered items through per-item…
git:20261004.f780158 · audit A · 32 stars
bulk SKILL.md skill
kdy1/kdy1-scripts · skills/bulk/SKILL.md · Apply a common prompt to a finite text list of items through per-item worktree chats in the current project…
git:20261004.f780158 · audit A · 32 stars
collect-review SKILL.md skill
kdy1/kdy1-scripts · skills/collect-review/SKILL.md · Collect unresolved bug candidates from existing Codex reviews on merged GitHub PRs, hand each candidate to $add-issue…
git:20261011.8c29ab5 · audit A · 32 stars
create-human-reviewed-pr SKILL.md skill
kdy1/kdy1-scripts · skills/create-human-reviewed-pr/SKILL.md · Publish human-reviewed changes as a non-draft GitHub pull request with AI-use disclosure, a human-reviewer mention, and…
git:20261006.2973f18 · audit A · 32 stars
create-pr SKILL.md skill
kdy1/kdy1-scripts · skills/create-pr/SKILL.md · Publish intended changes as a GitHub pull request with verified Closes references for fully resolved issues and Refs…
git:20261020.750871a · audit A · 32 stars
design-ui SKILL.md skill
kdy1/kdy1-scripts · skills/design-ui/SKILL.md · Design new or changed product UI, including direct UI changes and UI plans, specifications, or issues. Ground the…
git:20261020.323d825 · audit A · 32 stars
improve-skill-efficiency SKILL.md skill
kdy1/kdy1-scripts · skills/improve-skill-efficiency/SKILL.md · Optimize a specified skill using its local Codex session history and API-priced token costs. Use when asked to improve…
git:20261017.c04e93d · audit A · 32 stars
list-good-prs SKILL.md skill
kdy1/kdy1-scripts · skills/list-good-prs/SKILL.md · List open pull requests in the current GitHub repository that are CLEAN or UNSTABLE and have a +1 reaction from…
git:20260829.1e04d66 · audit A · 32 stars
main-qa SKILL.md skill
kdy1/kdy1-scripts · skills/main-qa/SKILL.md · Run parallel web-app QA for functional and usability problems with GPT-5.6 Luna xhigh subagents and explicitly delegate…
git:20261004.073ae54 · audit A · 32 stars
manage-stacked-prs SKILL.md skill
kdy1/kdy1-scripts · skills/manage-stacked-prs/SKILL.md · Modify existing GitHub stacked PRs and restack and verify affected upper layers with gh stack. Apply when editing a PR…
git:20261012.c2ad695 · audit A · 32 stars

Every file in kdy1/kdy1-scripts

Other files named static-analysis

static-analysis SKILL.md skill
felvieira/claude-skills-fv · skills/34-static-analysis/SKILL.md · Skill de scan automatizado de codigo para vulnerabilidades, bugs e code smells via Semgrep e CodeQL. Use antes de toda…
git:20260909.2bf525b · audit A · 24 stars

Browse by kind, by grade A, or by owner.