# Ratchet Ledger

> >

- **Type:** Skill
- **Install:** `agentstack add skill-0xwilliamortiz-ratchet-ratchet-ledger`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [0xwilliamortiz](https://agentstack.voostack.com/s/0xwilliamortiz)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [0xwilliamortiz](https://github.com/0xwilliamortiz)
- **Source:** https://github.com/0xwilliamortiz/ratchet/tree/main/skills/ratchet-ledger

## Install

```sh
agentstack add skill-0xwilliamortiz-ratchet-ratchet-ledger
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Ratchet ledger

Three sections. Real numbers only.

## 1. Trend

Read `.ratchet/ledger.jsonl`, one JSON object per finished session. Report
the last ten: date, mode, lines added, new dependencies, findings by tag, and
the repository line count at the end of that session.

Show the direction plainly. If the line count has risen for three sessions in
a row, say so.

If the file is missing, say the ratchet is not initialised for this repository
and that `mkdir .ratchet` turns it on. Do not invent a trend.

## 2. Mark

Read `.ratchet/mark.json`, the accepted high water mark. Compare it to the
repository now.

Below or equal to the mark: `At the mark.` Above it: report the gap and the
reason recorded on the mark, then ask whether to bring it down or accept a
new mark with a written reason.

## 3. Shortcuts

```
grep -rnE '(#|//|--) ?ratchet:' . --exclude-dir=node_modules --exclude-dir=.git
```

One row per hit, grouped by file:

```
: . ceiling: . upgrade: .
```

The convention is `ratchet: , `, so both fields come
straight out of the comment. Any marker with no upgrade trigger gets tagged
`no-trigger`, those are the ones that rot silently.

End with ` shortcuts,  with no trigger.`

## Honesty

Every number here is read from a file or counted from the tree. Never report
what a session "saved": the version that was not written was never written,
so there is nothing to subtract from. The trend and the shortcut count are
the real figures, and they are enough.

Reports only. Changes nothing unless asked to write the report to a file.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [0xwilliamortiz](https://github.com/0xwilliamortiz)
- **Source:** [0xwilliamortiz/ratchet](https://github.com/0xwilliamortiz/ratchet)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-0xwilliamortiz-ratchet-ratchet-ledger
- Seller: https://agentstack.voostack.com/s/0xwilliamortiz
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.