ai-safe2-secure-build-copilot SKILL.md skillA
ai-safe2-secure-build-copilot from cyberstrategyinstitute/ai-safe2-framework is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add cyberstrategyinstitute/ai-safe2-framework/ai-safe2-secure-build-copilot@v3.1.0Pins v3.1.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- cyberstrategyinstitute/ai-safe2-framework
- Path
skills/ai-safe2-secure-build-copilot/SKILL.md- Versions recorded
- 2
- Latest version
- v3.1.0, committed Oct 23, 2026
- First version recorded
- Oct 7, 2026
- Size
- 10,864 bytes
- Repository stars
- 158
- License
- a license file GitHub does not identify
Apply AI SAFE2 v3.1 to design, build, audit, test, and govern AI agents, multi-agent systems, RAG, MCP/tool integrations, and AI infrastructure. Use the 161-control core taxonomy plus applicable profile overlays such as CP.5.MCP MCP-1 through MCP-19. Classify autonomy with ACT tiers, enforce HEAR and replication governance where required, distinguish framework requirements from reference implementations, and require reconstructable evidence for material claims.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# AI SAFE² v3.1 Secure Build Copilot You apply the [AI SAFE² Framework v3.1](../../README.md): 161 core controls across five operational pillars plus the core CP.1 through CP.10 Cross-Pillar Governance layer. Where a platform or protocol profile applies, use that profile in addition to the core framework. For MCP, use CP.5.MCP v3.1, MCP-1 through MCP-19, aligned to MCP `2026-07-28` with legacy `2025-11-25` compatibility. ## Governing Principles 1. **If governance is not enforced at runtime, it is not governance.** 2. Bind governance to verified principals, authority, policy, provenance, and evidence, not to protocol-owned session constructs. 3. Treat NEXUS as CSI's reference implementation, not as a mandatory dependency for AI SAFE² conformance. 4. Separate framework controls from profile controls. AI SAFE² v3.1 remains 161 core controls; MCP profile controls do not make the total 180. 5. Preserve historical version facts. A control introduced in v3.0 remains "introduced in v3.0" even when the current framework is v3.1. 6. Do not treat model or agent prose as evidence that a protected state change occurred or was prevented. …
Read the whole file at its exact version.
How to install
mdr add cyberstrategyinstitute/ai-safe2-framework/ai-safe2-secure-build-copilot@sha256:a5e2886bd1fbf166The line at the top of this page pins the label v3.1.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_z75cozy4l44rdhjs)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Oct 7, 2026 and Oct 23, 2026, about one every 16 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v3.1.0 latest | 2026-10-23 | bdb2ca6 | 10,864 B | A | view · diff |
| v3.1.0 | 2026-10-07 | 906c863 | 10,842 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10864 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
cyberstrategyinstitute/ai-safe2-framework · 158 stars · license a license file GitHub does not identify · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_z75cozy4l44rdhjs GET https://markdownregistry.com/api/v1/resolve?ref=cyberstrategyinstitute/ai-safe2-framework/ai-safe2-secure-build-copilot GET https://markdownregistry.com/api/v1/blob/a5e2886bd1fbf166f0d656927307c18ede516194a6b2dba628b98dce72bcbf77
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from cyberstrategyinstitute/ai-safe2-framework
Every file in cyberstrategyinstitute/ai-safe2-framework