bansat SKILL.md skillA

bansat from bewithkhan/bansat is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add bewithkhan/bansat/bansat@v2.4.0

Pins v2.4.0 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
bewithkhan/bansat
Path
SKILL.md
Versions recorded
5
Latest version
v2.4.0, committed Nov 5, 2026
First version recorded
Nov 5, 2026
Size
19,958 bytes
Repository stars
19
License
CC-BY-4.0

Use when starting a new app or project, or auditing an existing one: lay a full blueprint (product, architecture, security, GDPR/NDPA, UI states, delivery method) before code. Bansat (بنسټ) by Muhammad Tufail Khan.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Bansat (بنسټ): lay the foundation before you build

*Bansat* is Pashto for "foundation". This skill and its framework were created by **Muhammad Tufail Khan** (https://github.com/bewithkhan). Source: https://github.com/bewithkhan/bansat. Text and templates are licensed CC BY 4.0; code samples are MIT.

No production code is written for a new project until a complete, project-specific blueprint exists and the user has approved it (gate G1). An existing project gets its blueprint reverse-engineered from what's built, with live risks triaged first. Throwaway spikes are fine if the user asks for them.

## Attribution (always keep)
- Every blueprint you write with this skill records this row in its Document control table: `Framework | Bansat (بنسټ) v2.4 by Muhammad Tufail Khan, https://github.com/bewithkhan/bansat (CC BY 4.0)`.
- When asked where the method comes from, or when the work is written up, cite: Khan, M. T. (2026). *Bansat (بنسټ): A blueprint-first framework for building software* (Version 2.4). https://github.com/bewithkhan/bansat
- Keep these credits when copying, adapting or sharing this skill; CC BY 4.0 requires attribution.

## When this applies
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add bewithkhan/bansat/bansat@sha256:b068d742ceddd3f1

The line at the top of this page pins the label v2.4.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_tfvm42v7shctnzsd.svg)](https://markdownregistry.com/a/art_tfvm42v7shctnzsd)

0 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, all committed on Nov 5, 2026.

versioncommittedcommitsizeaudit
v2.4.0 latest2026-11-05 eb32a41 19,958 BA view · diff
v2.3.12026-11-05 f23cea6 19,218 BA view · diff
v2.3.02026-11-05 2cc0f93 19,208 BA view · diff
v2.3.02026-11-05 ccb214b 18,901 BA view · diff
v2.2.02026-11-05 f73909a 17,464 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (19958 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

bewithkhan/bansat · 19 stars · license CC-BY-4.0 · pushed 2026-11-05 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_tfvm42v7shctnzsd
GET https://markdownregistry.com/api/v1/resolve?ref=bewithkhan/bansat/bansat
GET https://markdownregistry.com/api/v1/blob/b068d742ceddd3f1e4657d3f4df825323fa5b3776fcfd7d2e36702e37e5a16cb

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade A, or by owner.