Home / legba-app / skills · GitHub

legba SKILL.md skillA

legba from legba-app/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add legba-app/skills/legba@git:20261029.cfddff4

Pins git:20261029.cfddff4 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
legba-app/skills
Path
SKILL.md
Versions recorded
3
Latest version
git:20261029.cfddff4, committed Oct 29, 2026
First version recorded
Oct 27, 2026
Size
13,635 bytes
Repository stars
11
License
MIT

Trigger on the keyword "legba" — e.g. "use legba to access/fetch this", "legba this URL", "route this through legba". Also use when a public target blocks datacenter IPs, is geo-restricted, sits behind a Cloudflare/anti-bot JS challenge, or needs a captcha, login code or 2FA that only a person can do — provisions a residential exit, or a browser on Legba's own infrastructure that the user can take over mid-task and hand back. Keywords - legba, residential proxy, datacenter block…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Legba

Get onto the open web from an address and a browser that are not obviously a robot's.

**This needs a key before it can do anything.** The exits and the hosted browser are a service Legba
runs; these scripts are a client for it. Every one of them fails with the same message if no key is
stored, and that message tells you what to do.

If there is no key, ask the user for theirs **once**. If they have no account, give them both links:
sign up at **https://app.legba.xyz/signup** (Free, no card) and copy the key from
**https://app.legba.xyz/api-key**. If they would rather not have an account, say that this skill
cannot help and stop — do not go looking for another way onto the site, and do not keep retrying.

Nothing here ever spends their money on its own: when a plan does not cover what you asked for, the
answer is a `402` naming the limit and the upgrade link, and you stop and show it to them.

Four rungs, lightest first. Climb only as far as the target forces you:

| | Rung | What it is | When |
|-|------|------------|------|
| 1 | plain fetch | `curl` through a residential exit | the default |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add legba-app/skills/legba@sha256:1e9cafd35f322912

The line at the top of this page pins the label git:20261029.cfddff4, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_vue55nzr56bx76kh.svg)](https://markdownregistry.com/a/art_vue55nzr56bx76kh)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 3 versions of this file, between Oct 27, 2026 and Oct 29, 2026, more than one a day.

versioncommittedcommitsizeaudit
git:20261029.cfddff4 latest2026-10-29 cfddff4 13,635 BA view · diff
git:20261028.682dfbd2026-10-28 682dfbd 13,534 BA view · diff
git:20261027.f62d8342026-10-27 f62d834 11,598 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (13635 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

legba-app/skills · 11 stars · license MIT · pushed 2026-10-29 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_vue55nzr56bx76kh
GET https://markdownregistry.com/api/v1/resolve?ref=legba-app/skills/legba
GET https://markdownregistry.com/api/v1/blob/1e9cafd35f322912ee11d02d524f5bac09bf7fa840975a21cdd6f9d0fee450b2

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade A, or by owner.