sekisho SKILL.md skillA
sekisho from i2y/ritsu is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add i2y/ritsu/sekisho@git:20261104.5b400fcPins git:20261104.5b400fc in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- i2y/ritsu
- Path
skills/sekisho/SKILL.md- Versions recorded
- 7
- Latest version
- git:20261104.5b400fc, committed Nov 4, 2026
- First version recorded
- Oct 7, 2026
- Size
- 17,055 bytes
- Repository stars
- 3
- License
- Apache-2.0
Write, check and fix sekisho files (`.gate`), the authorization of a service written as who may do what — principals, roles, attributes and relations, the actions that guard the operations of an OpenAPI, AsyncAPI or `.proto` contract, and the permits, forbids, expectations and separations of duties that decide them, with the answers of rulec's rules and koyomi's dates as conditions — checked on every combination the file declares and compiled to Cedar. Use when who may call which operation has…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
## When this applies The job is **the authorization of a service, written where it can be checked**: which principal (a person signed in, a service, a workflow) may do which action on which resource, under which conditions, and which operation of the service's contract each action guards. sekisho writes it as a `.gate`, checks every combination of roles, attributes, inputs and the answers of the rules and dates it reads, and generates Cedar and the code that asks Cedar. It does not apply to authentication (who the caller is: the service's own login, tokens, mTLS), to the balance of an account (that is a bound of chobo's book, kept in the write itself), or to a relation that goes more than one step (`resource.project.owner`): sekisho writes none of those. The files bundled with this skill are `reference.md` (the whole language and the commands) and `codes.md` (every diagnostic). Read them when you need them, not all up front. --- # Working with sekisho Your part is to write the gate, get it past `ritsu sekisho check`, generate what the service runs, and show the page to the people who decide who may do what. Three things stay with people: …
Read the whole file at its exact version.
How to install
mdr add i2y/ritsu/sekisho@sha256:2be32b4d67b4a847The line at the top of this page pins the label git:20261104.5b400fc, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_pbbalnfkifsnatbj)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 7 versions of this file, between Oct 7, 2026 and Nov 4, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261104.5b400fc latest | 2026-11-04 | 5b400fc | 17,055 B | A | view · diff |
| git:20261103.dc4ff6b | 2026-11-03 | dc4ff6b | 16,795 B | A | view · diff |
| git:20261029.200ec28 | 2026-10-29 | 200ec28 | 16,738 B | A | view · diff |
| git:20261021.f935dcb | 2026-10-21 | f935dcb | 16,147 B | A | view · diff |
| git:20261018.9ccfb85 | 2026-10-18 | 9ccfb85 | 15,927 B | A | view · diff |
| git:20261011.0d256e5 | 2026-10-11 | 0d256e5 | 15,794 B | A | view · diff |
| git:20261007.3939c88 | 2026-10-07 | 3939c88 | 14,416 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (17055 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
i2y/ritsu · 3 stars · license Apache-2.0 · pushed 2026-11-07 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_pbbalnfkifsnatbj GET https://markdownregistry.com/api/v1/resolve?ref=i2y/ritsu/sekisho GET https://markdownregistry.com/api/v1/blob/2be32b4d67b4a847545f00a0bf7213789bec1a7c965535ba5cb693be70984890
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.