gh-aw-enlistment SKILL.md skillA
This file is byte-identical to the first copy the registry indexed. Same content hash, so the same checks give both the same grade.
gh-aw-enlistment from bradygaster/squad is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add bradygaster/squad/gh-aw-enlistment@git:20261011.1f3c178Pins git:20261011.1f3c178 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- bradygaster/squad
- Path
packages/squad-cli/templates/skills/gh-aw-enlistment/SKILL.md- Versions recorded
- 5
- Latest version
- git:20261011.1f3c178, committed Oct 11, 2026
- First version recorded
- Oct 2, 2026
- Size
- 30,292 bytes
- Repository stars
- 3,298
- License
- MIT
Enlist a repository into Squad by installing the supported GitHub Agentic Workflows (gh-aw) bootstrap — with strict compilation, an explicit safe-update allowlist, and a human-reviewed bootstrap PR. Never auto-merges.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
## Context Use this skill when a user wants to **enlist a repository into Squad** through **GitHub Agentic Workflows (`gh aw`)** — e.g. "set up Squad agentic workflows", "enlist this repo in Squad", or "install Squad gh-aw workflows". The end state is the `/squad` slash command being live on the repo, delivered as a **human-reviewed bootstrap pull request** — never an auto-merge. This skill **operationalizes** the supported bootstrap path. It does not summarize it: each step below is a gate with explicit success evidence and **STOP conditions**. The authoritative source is `docs/src/content/docs/guide/gh-aw.md` (mirrored at `https://bradygaster.github.io/squad/docs/guide/gh-aw/`). If that guide and this skill ever disagree, the guide wins — re-read it before proceeding. GitHub Issues are a hard prerequisite: `/squad` commands arrive as issue comments, and the merged bootstrap creates a research/proposals issue. Detect and enable Issues before creating the bootstrap branch or installing workflows, so the install cannot produce a PR whose post-merge bootstrap is unable to complete. **Portability contract:** resolve every target repository identifier (owner, repo, …
Read the whole file at its exact version.
How to install
mdr add bradygaster/squad/gh-aw-enlistment@sha256:b982dfa4572c9b16The line at the top of this page pins the label git:20261011.1f3c178, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_zy3annfpzwslttld)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Oct 2, 2026 and Oct 11, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261011.1f3c178 latest | 2026-10-11 | 1f3c178 | 30,292 B | A | view · diff |
| git:20261009.c7d8791 | 2026-10-09 | c7d8791 | 29,920 B | A | view · diff |
| git:20261002.88b4550 | 2026-10-02 | 88b4550 | 29,927 B | A | view · diff |
| git:20261002.2b0ac27 | 2026-10-02 | 2b0ac27 | 28,842 B | A | view · diff |
| git:20261002.4f42931 | 2026-10-02 | 4f42931 | 27,750 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (30292 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
bradygaster/squad · 3,298 stars · license MIT · pushed 2026-10-22 · branch dev
API
GET https://markdownregistry.com/api/v1/artifacts/art_zy3annfpzwslttld GET https://markdownregistry.com/api/v1/resolve?ref=bradygaster/squad/gh-aw-enlistment GET https://markdownregistry.com/api/v1/blob/b982dfa4572c9b16ffd3ddf3ed3102562dce5098b9ec14d27b76ad0ffc964800
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from bradygaster/squad
Every file in bradygaster/squad