# Safe Markdown Auto Fix

> Auto-fix Markdown prose without corrupting code blocks, inline code, URLs, or HTML.

- **Type:** Skill
- **Install:** `agentstack add skill-chen3feng-agent-skills-safe-markdown-auto-fix`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [chen3feng](https://agentstack.voostack.com/s/chen3feng)
- **Installs:** 0
- **Category:** [Content & Media](https://agentstack.voostack.com/c/content-and-media)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [chen3feng](https://github.com/chen3feng)
- **Source:** https://github.com/chen3feng/agent-skills/tree/master/skills/safe-markdown-auto-fix

## Install

```sh
agentstack add skill-chen3feng-agent-skills-safe-markdown-auto-fix
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Safe Markdown auto-fix

## When to use

You're writing (or reviewing) a regex-based fixer for Markdown —
spacing rules, typography, terminology normalization. Applies to any
lint-and-fix tool, including the `cndocstyle` package shipped with
[cn-doc-style-guide](https://github.com/chen3feng/cn-doc-style-guide).

## Problem

A naive `re.sub` over the whole file will cheerfully mangle:

- Fenced code blocks (``` ``` ``` ```): inserting "helpful" spaces in
  the middle of a Python string breaks the program.
- Inline code spans (`` `foo_bar` ``): adding space around `_` ruins
  identifiers.
- Link URLs (`[text](https://…)`): even *reading* URLs as prose
  produces false positives like "space between CJK and ASCII" inside
  a percent-encoded path.
- HTML tags / comments: `` is prose inside HTML,
  but the tag itself must stay intact.

## Solution

Always tokenize the file into "protected" and "prose" regions before
applying any substitution. A minimal protection list:

```python
PROTECT = [
    # fenced code blocks, greedy across lines
    re.compile(r"```[\s\S]*?```", re.MULTILINE),
    # indented code blocks (4+ leading spaces at start of line)
    re.compile(r"(?:^|\n)(?: {4,}|\t).+", re.MULTILINE),
    # inline code
    re.compile(r"`[^`\n]+`"),
    # link / image URLs — keep the URL, allow fixing the text
    re.compile(r"\]\([^)\n]+\)"),
    # raw HTML tags and comments
    re.compile(r""),
    re.compile(r"]*>"),
]
```

Then:

1. Walk the text, carving out every match into a `placeholder`
   (e.g. `\x00PROTECT_N\x00`) and storing the original.
2. Run your prose-level substitutions on the placeholder-laced text.
3. Restore placeholders.

For a fixer it's also important to:

- **Default to dry-run.** Print a unified diff; require `--apply` to
  write.
- **Be idempotent.** Running the tool twice must not change output.
- **Fail closed.** If in doubt (ambiguous context, mixed-script
  identifiers), leave the text untouched and log a warning rather
  than silently "correcting" it.

## Example

Wrong — direct substitution corrupts code:

```python
# inserts a space between CJK and ASCII everywhere
new = re.sub(r"([\u4e00-\u9fff])([A-Za-z0-9])", r"\1 \2", text)
# => a Python string literal "你好World" inside a ``` block
#    becomes "你好 World", breaking the code
```

Right — protect first, then substitute:

```python
protected, restore = protect(text, PROTECT)
protected = re.sub(r"([\u4e00-\u9fff])([A-Za-z0-9])", r"\1 \2", protected)
new = restore(protected)
```

## Pitfalls

- Fenced code blocks can be indented inside list items; anchor your
  regex to ```` ``` ```` rather than "start of line".
- Backslash-escaped backticks inside inline code (`` \` ``) are rare
  but real — include a unit test.
- Don't touch line endings or trailing whitespace as part of the same
  pass; that's a separate tool (or a separate regex with clear
  opt-in).

## See also

- [chinese-markdown-style](../chinese-markdown-style/SKILL.md)
- [doc-code-consistency-check](../doc-code-consistency-check/SKILL.md)

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [chen3feng](https://github.com/chen3feng)
- **Source:** [chen3feng/agent-skills](https://github.com/chen3feng/agent-skills)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** yes

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-chen3feng-agent-skills-safe-markdown-auto-fix
- Seller: https://agentstack.voostack.com/s/chen3feng
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.