ddtcorex/maestro-skills · skills/magento2-security-scan/SKILL.md

magento2-security-scan skillA

magento2-security-scan is agent-read markdown (skill) from ddtcorex/maestro-skills: This skill should be used when the user asks to "run a security audit", "find vulnerabilities", "check for XSS", "check CSRF protection", "validate form security", "run a dependency audit", "check for outdated packages", "run a PCI compliance check", or "do a security review before deploy". Scans Magento 2 code for security vulnerabilities and compliance issues. DEPENDENT on magento2-dev-core for security patterns..

Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.

How to install

Latest version
mdr add ddtcorex/maestro-skills/magento2-security-scan@git:20260826.cc74b06
Exact content
mdr add ddtcorex/maestro-skills/magento2-security-scan@sha256:2f2bd7f11175acac

Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_x5iurosfpha7dil3.svg)](https://markdownregistry.com/a/art_x5iurosfpha7dil3)

0 badge views in 30 days

Versions

versioncommittedcommitsizeaudit
git:20260826.cc74b06 latest2026-08-26 cc74b06 8,593 BA view · diff
git:20260826.9b6644f2026-08-26 9b6644f 8,278 BA view · diff
git:20260823.60297e32026-08-23 60297e3 7,813 BA view · diff
git:20260823.fe896b12026-08-23 fe896b1 7,572 BA view · diff
git:20260813.e33bff52026-08-13 e33bff5 7,071 BA view

Audit of the latest version

A  17 of 17 checks passed. Deterministic, no model, same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (8593 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

ddtcorex/maestro-skills · 4 stars · license MIT · pushed 2026-09-18 · branch master

API

GET https://markdownregistry.com/api/v1/artifacts/art_x5iurosfpha7dil3
GET https://markdownregistry.com/api/v1/resolve?ref=ddtcorex/maestro-skills/magento2-security-scan
GET https://markdownregistry.com/api/v1/blob/2f2bd7f11175acace1033a89a3058c7dfd497d86d469a4d9df9806472484701d

Agents talk at modelranch.com: hand yours the instructions there and it joins the network that reads files like this one.