ax-audit SKILL.md skillA
ax-audit from mblode/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add mblode/agent-skills/ax-audit@git:20261003.52dd41ePins git:20261003.52dd41e in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- mblode/agent-skills
- Path
skills/ax-audit/SKILL.md- Versions recorded
- 7
- Latest version
- git:20261003.52dd41e, committed Oct 3, 2026
- First version recorded
- Aug 31, 2026
- Size
- 11,109 bytes
- Repository stars
- 180
- License
- MIT
Audits agentic products for tool parity, authority, approval payloads, recovery, and trust using 24 rules and a ship verdict. Use when asked for an "AX audit", to review an agent approval flow, or whether an agent can operate the product.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# AX Audit Feature-level reviewer for apps where an agent acts for the user. One question: **does it earn trust, and where does it break?** - **IS:** rules-based audit of agentic surfaces (chat, tool execution, config, dashboards) across architecture (`rules-arch/`) and trust (`rules-ax/`), ending in a ship-readiness verdict plus an AX Relationship Summary. - **IS NOT:** traditional frontend UX (use `ui-design` Audit mode); developer-facing API, CLI, or type ergonomics (use `dx-audit`); public site or docs agent scores (use `agent-ready`); agent instruction files (use `agents-md`); what the product should do before it exists (use `product-design`). No agentic features in scope? Stop. AX rules against forms and lists are noise. ## Contents - [Audit workflow](#audit-workflow) - [Two rule layers](#two-rule-layers) - [Tiers and verdict](#tiers-and-verdict) - [AX Relationship Summary](#ax-relationship-summary) - [Reference files](#reference-files) - [Gotchas](#gotchas) - [Audit self-check](#audit-self-check) - [Related skills](#related-skills) ## Audit workflow ```text AX Audit progress: …
Read the whole file at its exact version.
How to install
mdr add mblode/agent-skills/ax-audit@sha256:3f0d80d9012807d4The line at the top of this page pins the label git:20261003.52dd41e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_z2yahhtgwvx4xm6e)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 7 versions of this file, between Aug 31, 2026 and Oct 3, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261003.52dd41e latest | 2026-10-03 | 52dd41e | 11,109 B | A | view · diff |
| git:20260918.57eb304 | 2026-09-18 | 57eb304 | 11,373 B | A | view · diff |
| git:20260904.359fa94 | 2026-09-04 | 359fa94 | 11,195 B | A | view · diff |
| git:20260901.a877ac0 | 2026-09-01 | a877ac0 | 11,627 B | A | view · diff |
| git:20260901.cb98345 | 2026-09-01 | cb98345 | 10,054 B | A | view · diff |
| git:20260831.b6e45d1 | 2026-08-31 | b6e45d1 | 9,309 B | A | view · diff |
| git:20260831.c769376 | 2026-08-31 | c769376 | 9,039 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11109 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
mblode/agent-skills · 180 stars · license MIT · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_z2yahhtgwvx4xm6e GET https://markdownregistry.com/api/v1/resolve?ref=mblode/agent-skills/ax-audit GET https://markdownregistry.com/api/v1/blob/3f0d80d9012807d405aeb08c91d262b1a67a05319c4443370e0f0e7a2b915117
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from mblode/agent-skills
Every file in mblode/agent-skills