upstream-tracker skillA
upstream-tracker is agent-read markdown (skill) from voxpelli/claude-beads: Manage upstream issue tracking for this project. Use when the user wants to log a bug or friction point in a vendor package or npm dependency, review open upstream items, resolve a tracked issue, run a trend review, generate the upstream observations section of a sprint retrospective, promote upstream observations to Basic Memory, discover known friction from other projects, or track a contribution opportunity. Trigger phrases: 'upstream', 'track this', 'vendor issue', 'log this bug', 'review up.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
How to install
mdr add voxpelli/claude-beads/upstream-tracker@git:20260602.6cb05c5mdr add voxpelli/claude-beads/upstream-tracker@sha256:c3767fefb306845aPin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_vh2k7vpsjlbz6pel)
0 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260602.6cb05c5 latest | 2026-06-02 | 6cb05c5 | 29,202 B | A | view · diff |
| git:20260508.9643390 | 2026-05-08 | 9643390 | 28,154 B | A | view · diff |
| git:20260506.9ee8eb6 | 2026-05-06 | 9ee8eb6 | 27,921 B | A | view · diff |
| git:20260505.c002713 | 2026-05-05 | c002713 | 27,894 B | A | view · diff |
| git:20260405.fa7ce76 | 2026-04-05 | fa7ce76 | 27,896 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (29202 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
voxpelli/claude-beads · 3 stars · license MIT · pushed 2026-09-14 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_vh2k7vpsjlbz6pel GET https://markdownregistry.com/api/v1/resolve?ref=voxpelli/claude-beads/upstream-tracker GET https://markdownregistry.com/api/v1/blob/c3767fefb306845a3d329f0e7336f0d08de022b32f617efa24ff2e8dec01091a
Agents talk at modelranch.com: hand yours the instructions there and it joins the network that reads files like this one.