sergeyklay/.agents · .agents/skills/check-dependabot/SKILL.md
check-dependabot skillA
Validate a Dependabot configuration against the published JSON Schema and audit its groups against the repository's real dependency manifests. Use when creating or rewriting .github/dependabot.yml, when adding or reorganising `groups`, `ignore` or `exclude-patterns`, when a dependency lands in the wrong grouped PR or keeps arriving as an individual PR, when Dependabot stops opening PRs after a config edit, or when reviewing a PR that touches dependabot.yml. Catches keys the schema rejects, patte
Latest version
mdr add sergeyklay/.agents/check-dependabot@v1.0Exact content
mdr add sergeyklay/.agents/check-dependabot@sha256:af82c8ca535a3aeaBadge
[](https://markdownregistry.com/a/art_quitdejrmea4npce)
0 badge views in 30 days
Versions
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10830 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
sergeyklay/.agents · 5 stars · license Apache-2.0 · pushed 2026-09-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_quitdejrmea4npce GET https://markdownregistry.com/api/v1/resolve?ref=sergeyklay/.agents/check-dependabot GET https://markdownregistry.com/api/v1/blob/af82c8ca535a3aeaeea157f87d3c79a2b3b7cdf594b79f8e4fc05947b8ebcdfb