necessity-audit SKILL.md skillA
necessity-audit from sd0xdev/sd0x-harness is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add sd0xdev/sd0x-harness/necessity-audit@git:20260905.7f65168Pins git:20260905.7f65168 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- sd0xdev/sd0x-harness
- Path
skills/necessity-audit/SKILL.md- Versions recorded
- 3
- Latest version
- git:20260905.7f65168, committed Sep 5, 2026
- First version recorded
- Apr 21, 2026
- Size
- 10,888 bytes
- Repository stars
- 194
- License
- MIT
Necessity audit for over-designed spec elements. Use when: auditing lifecycle spec (1-requirements / 2-tech-spec / 3-architecture) for YAGNI/KISS violations, challenging necessity of FRs/NFRs/abstractions/configs via Codex adversarial debate. Not for: FP reasoning validity (use /codex-review-spec), completeness check (use /feature-completeness), detail review (use /codex-review-doc), or code-level simplification (use /simplify).
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Necessity Audit 3-phase necessity audit with Codex adversarial debate. Identifies over-designed elements in lifecycle specs via 6-dimension YAGNI rubric. ## Non-Negotiable Rules > **SKILL.md is the normative source.** Reference files elaborate but do not override. | # | Rule | Violation = | |---|------|-------------| | 1 | Phase A classification output **must NOT** appear in Phase B debate topic | Audit invalid | | 2 | Phase B **must** invoke `/codex-brainstorm` via Skill tool — a raw transport dispatch for debate is invalid | Audit invalid | | 3 | Phase C report **must** include non-empty `debate.threadId` | Report rejected | | 4 | Phase C report **must** include `Debate Conclusion` referencing specific rounds (not blank / placeholder) | Report rejected | | 5 | Output **must** start with `## Necessity Audit` header and end with `✅ Audit Clear` OR `⛔ Audit Revise` sentinel | Auto-loop cannot parse | ## Trigger - Keywords: necessity audit, over-design, YAGNI audit, spec necessity, 過度設計, over-engineered ## When NOT to Use ### Alternatives by intent | Intent | Use | Not this skill | |--------|-----|----------------| …
Read the whole file at its exact version.
How to install
mdr add sd0xdev/sd0x-harness/necessity-audit@sha256:57ad45a82f36fe34The line at the top of this page pins the label git:20260905.7f65168, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_xu5v2t2mr34dor3w)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Apr 21, 2026 and Sep 5, 2026, about one every 69 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260905.7f65168 latest | 2026-09-05 | 7f65168 | 10,888 B | A | view · diff |
| git:20260726.96786d1 | 2026-07-26 | 96786d1 | 10,771 B | A | view · diff |
| git:20260421.24e1b3a | 2026-04-21 | 24e1b3a | 7,662 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10888 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
sd0xdev/sd0x-harness · 194 stars · license MIT · pushed 2026-10-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_xu5v2t2mr34dor3w GET https://markdownregistry.com/api/v1/resolve?ref=sd0xdev/sd0x-harness/necessity-audit GET https://markdownregistry.com/api/v1/blob/57ad45a82f36fe340a7abf04b59d9516b8d86e882f695b2a079c870fc07560e8
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.