bugbash SKILL.md skillA
bugbash from av/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add av/skills/bugbash@git:20260402.6abcf0bPins git:20260402.6abcf0b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- av/skills
- Path
bugbash/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260402.6abcf0b, committed Apr 2, 2026
- Size
- 5,548 bytes
- Repository stars
- 24
- License
- MIT
Systematically explore and test any software project (CLI, API, Backend, Library, etc.) to find bugs, usability issues, and edge cases. Produces a structured report with full reproduction evidence (exact commands, inputs, logs, and tracebacks) for every issue.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Bugbash (General Software)
Systematically explore a software project, find issues, and produce a report with full reproduction evidence for every finding. This skill applies to CLIs, APIs, Backends, Libraries, and other non-web interfaces.
## Setup
Identify the **Target** (e.g., a CLI binary, an API base URL, a Python package).
| Parameter | Default | Example override |
|-----------|---------|-----------------|
| **Target** | _(required)_ | `./my-cli`, `http://localhost:8080`, `import mylib` |
| **Output directory** | `/tmp/dogfood-output/` | `Output directory: ./qa-reports` |
| **Scope** | Full project | `Focus on the auth middleware` |
## Workflow
```
1. Initialize Set up output dirs, report file, build/start the software
2. Orient Discover surface area (help menus, API schemas, exported functions)
3. Explore Systematically test features, inputs, and edge cases
4. Document Record exact inputs, outputs, and logs for each issue
5. Wrap up Update summary counts, finalize report
```
### 1. Initialize
```bash
mkdir -p {OUTPUT_DIR}/logs {OUTPUT_DIR}/evidence
```
Create a `report.md` in the output directory and fill in the header fields. Include:
…Read the whole file at its exact version.
How to install
mdr add av/skills/bugbash@sha256:a587c2fa6c2cd5ebThe line at the top of this page pins the label git:20260402.6abcf0b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_rvnqtvhgmf3tahag)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Apr 2, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5548 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
av/skills · 24 stars · license MIT · pushed 2026-10-21 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_rvnqtvhgmf3tahag GET https://markdownregistry.com/api/v1/resolve?ref=av/skills/bugbash GET https://markdownregistry.com/api/v1/blob/a587c2fa6c2cd5eb7af17f7811ac6291ee315ce0aa0b75d47dd13f7ddccf3fdd
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.