runtime-verification SKILL.md skillA
runtime-verification from jimyag/dotfiles is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add jimyag/dotfiles/runtime-verification@git:20261015.2c8093fPins git:20261015.2c8093f in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- jimyag/dotfiles
- Path
skills/runtime-verification/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261015.2c8093f, committed Oct 15, 2026
- Size
- 6,652 bytes
- Repository stars
- 11
- License
- MIT
在提交或交付非平凡代码改动前，需要确认改动在真实运行面上按预期工作时使用；通过 CLI、接口、界面、公开包入口或代理行为驱动改动路径并留存证据。只改测试、文档或无运行面的类型声明时不触发；定位缺陷使用 systematic-debugging，审查代码使用 requesting-code-review。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 运行面验证 目标是让改动的代码在真实入口上执行，并用捕获到的输出证明它做了声明的事。 测试、类型检查和构建是 CI 的证据，不是本技能的验证步骤；需要它们时单独执行并单独报告。在脚本里直接 import 内部函数再打印返回值，等于自己写了一个单元测试，应用并没有运行。 ## 确定范围 - 在 Git 仓库中先确定完整范围：已提交的分支差异（相对上游或基线分支）和未提交的工作区改动都要看，不只看 `HEAD~1`。报告提交数。 - diff 是事实，PR 描述、提交信息和用户说法是对 diff 的声明。两者都读，不一致本身就是发现。 - 找不到任何改动时说明并停止；不在仓库中时，范围以用户指定为准，未指定就询问。 ## 找到运行面 运行面是用户（人或程序）接触改动的地方： | 改动到达 | 运行面 | 做法 | |---|---|---| | CLI / TUI | 终端 | 执行命令，捕获 stdout、stderr 和退出码 | | 服务 / API | 网络端口 | 发请求，捕获状态码、响应头和响应体 | | 界面 | 渲染结果 | 用浏览器自动化或真实应用操作，截图 | | 库 | 公开导出 | 通过包名导入公开接口写示例，不从 `src/` 内部路径导入 | | 提示词 / 代理配置 | 代理行为 | 运行代理，记录它实际做了什么 | | CI 工作流 | CI 运行 | 触发或读取对应运行结果 | 内部函数不是运行面：沿调用方追到上表中的某一行，在那里观察。 只改文档、测试、无产物的类型声明或不改变行为的构建配置时，报告 `SKIP`，写一句原因，不用跑测试填补。测试与源码混合时只验证源码部分；可以读测试了解预期，但随后要去运行应用。 ## 获取启动方式 1. 先找项目已有的启动或验证入口：仓库根目录和改动所在子目录的技能、`Makefile`、`Taskfile`、`package.json` 脚本、README 和 CI 配置。monorepo 中优先找改动所在包自己的入口。 2. 没有现成入口时，从 README 和构建配置冷启动，限时约 15 分钟。卡住时报告 `BLOCKED`，写明停在哪一步、缺什么。 3. 冷启动成功且用户要求或项目约定沉淀时，把有效的构建、启动和驱动命令补进项目已有文档；已有文档只在它给出的命令失效或缺步骤时修改。 ## 驱动改动 - 用最短路径让改动代码执行：改了参数就带参数运行，改了处理函数就请求那个路由，改了错误处理就触发那个错误。 - 执行前回读计划：如果每一步都是构建、类型检查或跑测试文件，那是在重跑 CI，不是验证；找到能到达运行面的步骤，或报告 `BLOCKED`。 - 端到端走真实入口：用户点按钮，就点按钮，而不是只调用底层接口。各部分单独正常不代表连起来正常。 …
Read the whole file at its exact version.
How to install
mdr add jimyag/dotfiles/runtime-verification@sha256:27ef8058f6f2cb9aThe line at the top of this page pins the label git:20261015.2c8093f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_qf5gyp2nykohragy)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 15, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6652 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
jimyag/dotfiles · 11 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_qf5gyp2nykohragy GET https://markdownregistry.com/api/v1/resolve?ref=jimyag/dotfiles/runtime-verification GET https://markdownregistry.com/api/v1/blob/27ef8058f6f2cb9abbca20dea807c8feba1956b2e3bb5e9c5ef1e6e8213878dc
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.