code-quality SKILL.md skillA
code-quality from smixs/code-quality-skill is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add smixs/code-quality-skill/code-quality@git:20260928.2ebf3c8Pins git:20260928.2ebf3c8 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- smixs/code-quality-skill
- Path
skills/code-quality/SKILL.md- Versions recorded
- 9
- Latest version
- git:20260928.2ebf3c8, committed Sep 28, 2026
- First version recorded
- Sep 23, 2026
- Size
- 13,739 bytes
- Repository stars
- 21
- License
- MIT
Code quality advisor for a repo: one bun script behind git hooks and Claude Code, Codex, Grok, pi, omp, and OpenCode adapters. Never blocks: raises loud RED FLAGs on dangerous moves (secrets, tampered or deleted tests, red tests on push, skipped git hooks) and reports CRAP and complexity on changed functions, diff coverage, new cycles, dead code, clones, vulnerable dependencies and AI attribution in commits as findings the agent weighs. 12 languages, one .quality.toml per repo. Use when…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# code-quality ## Overview One script, `scripts/quality.ts`, called by every entry point. It advises and never forbids: the plugin trusts the agent the way a good reviewer trusts a colleague. It measures, shows what it found, and says loudly when something is dangerous; the agent decides what to do and says why. No hook stops a commit, a push, a tool call or the end of a turn. Every output starts with the red flags, one line each: `RED FLAG: <what you are doing> -- <why it is dangerous>; check: <what to verify>`. Then come the findings (`FINDINGS (n), advice, nothing blocked:`) or `CLEAN`, then notes. Old debt lives in a baseline and is not reported as a finding; a new finding on a changed line is. Jev (a classifier) and other reviewers write notes only. | entry point | when | what runs | time | |---|---|---|---| | `pre-commit` | `git commit` | `check --staged` on the staged change; prints the report, the commit goes ahead | 10-20 s | | `commit-msg` | `git commit` | AI attribution, glossary words in the message; a note, the commit goes ahead | < 1 s | …
Read the whole file at its exact version.
How to install
mdr add smixs/code-quality-skill/code-quality@sha256:ff611636c948dff7The line at the top of this page pins the label git:20260928.2ebf3c8, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ye362e37m4eecoou)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 9 versions of this file, between Sep 23, 2026 and Sep 28, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260928.2ebf3c8 latest | 2026-09-28 | 2ebf3c8 | 13,739 B | A | view · diff |
| git:20260927.c3ade3c | 2026-09-27 | c3ade3c | 11,415 B | A | view · diff |
| git:20260927.165a1ee | 2026-09-27 | 165a1ee | 11,324 B | A | view · diff |
| git:20260927.53704e8 | 2026-09-27 | 53704e8 | 11,111 B | A | view · diff |
| git:20260927.49c042a | 2026-09-27 | 49c042a | 10,963 B | A | view · diff |
| git:20260926.d55ed1f | 2026-09-26 | d55ed1f | 8,084 B | A | view · diff |
| git:20260926.3109715 | 2026-09-26 | 3109715 | 8,028 B | A | view · diff |
| git:20260923.fc0e808 | 2026-09-23 | fc0e808 | 7,874 B | A | view · diff |
| git:20260923.9c05dda | 2026-09-23 | 9c05dda | 8,046 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (13739 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
smixs/code-quality-skill · 21 stars · license MIT · pushed 2026-10-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ye362e37m4eecoou GET https://markdownregistry.com/api/v1/resolve?ref=smixs/code-quality-skill/code-quality GET https://markdownregistry.com/api/v1/blob/ff611636c948dff7ba0f8f9c8f7c2cf7bbabb5635a57728945cffe6a32a0d7a6
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from smixs/code-quality-skill
Every file in smixs/code-quality-skill