AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Ls Markdown Reference Validator

skill-cruxexperts-localsetup-ls-markdown-reference-validator · by CruxExperts

Use when validating repository Markdown local references and anchors; scheduled-safe YAML-configured reports keep host-aware scans explicit and local-only.

— No reviews yet
0 installs
2 views
0.0% view→install

Install

$ agentstack add skill-cruxexperts-localsetup-ls-markdown-reference-validator

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-cruxexperts-localsetup-ls-markdown-reference-validator)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● yesterday

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Ls Markdown Reference Validator? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Markdown reference validator

Validate repository Markdown reference integrity across LocalSetup docs, skills, templates, and repository documentation.

Purpose

  • Parse markdown files from configured paths/globs.
  • Validate local reference targets from markdown links and inline code paths.
  • Validate markdown #anchor fragments against heading slugs.
  • Write a durable markdown report for AI agents and humans.
  • Run safely on schedule with interval guard and optional jitter.

Why this exists

Framework and ops docs evolve quickly. Broken references waste agent cycles and reduce reliability. This skill provides a deterministic, zero-token integrity check that can run in cron/login automation and produce one report location agents can inspect.

Inputs and outputs

  • Input config (YAML): ls/skills/ls-markdown-reference-validator/templates/markdown_reference_audit.yaml, or a repo-local copy adapted from it.
  • Strict repo profile: ls/skills/ls-markdown-reference-validator/templates/markdown_reference_strict_repo.yaml
  • Host-aware profile: ls/skills/ls-markdown-reference-validator/templates/markdown_reference_host_aware.yaml
  • Skill entrypoint: scripts/markdown_reference_audit.py
  • Engine script: ls/skills/ls-markdown-reference-validator/scripts/markdown_reference_validator.py
  • Default report: .localsetup/state/markdown-reference/default.md (ignored local state)
  • Default run-state marker: .localsetup/state/markdown-reference/default-last-run-epoch (ignored local state)

Run and report

  1. Confirm the target YAML configuration before a scheduled or bulk audit,

including scan scope, report destination, and interval settings.

  1. Run the configured scanner using the commands below.
  2. Review the report's pass or failure counts and summarize broken paths and

anchors. Record the report location and remaining findings in the audit summary.

Typical commands

Run once manually:

python3 ls/skills/ls-markdown-reference-validator/scripts/markdown_reference_audit.py \
  --force \
  --reason manual

Run the strict repo-owned profile:

python3 ls/skills/ls-markdown-reference-validator/scripts/markdown_reference_audit.py \
  --config ls/skills/ls-markdown-reference-validator/templates/markdown_reference_strict_repo.yaml \
  --force \
  --reason manual

Run the explicit host-aware profile (its report stays in ignored local state and outside-repository paths are redacted):

python3 ls/skills/ls-markdown-reference-validator/scripts/markdown_reference_audit.py \
  --config ls/skills/ls-markdown-reference-validator/templates/markdown_reference_host_aware.yaml \
  --force \
  --reason manual

Run with login jitter (3-5 min):

python3 ls/skills/ls-markdown-reference-validator/scripts/markdown_reference_audit.py \
  --reason login-autostart \
  --jitter-min-seconds 180 \
  --jitter-max-seconds 300

Scheduling model

Recommended defaults:

  • Periodic: every 12 hours (cron trigger).
  • Login: run once at user login with random delay 3-5 minutes.

Use ls-cron-orchestrator with a user-created manifest (for example cron/manifest.yaml in the target repo) for periodic trigger, and XDG autostart desktop entry for login trigger. This skill does not ship a cron manifest.

Config model (YAML sidecar)

The sidecar config defines:

  • targets[]: each with base_dir, include_globs, optional exclude_globs.
  • kilo_manifest_discovery.manifests[]: kilo.json or kilo.jsonc paths to discover additional instruction/skills markdown surfaces. JSONC manifests may use comments and trailing commas.
  • report.output_path, report.state_file, and report.max_findings.
  • extraction.inline_code_mode: off | smart | all (smart is default and recommended).
  • ignore.* blocks to reduce false positives from templates/examples while keeping strict checks for concrete links.

The shipped default profile is repo-only and writes report/state only beneath ignored .localsetup/state/markdown-reference/. Use the strict repo profile for narrower tracked-source link and anchor review. Use the host-aware profile only when you explicitly need local adapter or host instruction surfaces; its report remains local-only and redacts paths outside repo_root.

The strict profile checks active documentation, not the transitive completeness of selectively imported upstream archives. It excludes only *.source.md snapshots under references/upstream/; authored coverage notes and ordinary references remain in scope. Preserve snapshot bytes and verify their recorded hashes separately. Use a custom profile without that exclusion when intentionally auditing archived upstream links, and interpret omissions against the archive's import policy.

Config schema (practical defaults)

extraction:
  inline_code_mode: smart
  # Back-compat toggle: if inline_code_mode omitted, true => smart / false => off
  include_inline_code_paths: true

ignore:
  # Skip scanning these markdown sources entirely.
  source_file_globs:
    - "**/node_modules/**"
    - "**/.kilo/state/**"
    - "**/.kilo/plans/**"

  # Skip targets matching any regex (examples/placeholders/snippets).
  target_regexes:
    - '^URL$'
    - '^]+>$'
    - '^\$[A-Za-z_][A-Za-z0-9_]*(/.*)?$'

  # Skip targets starting with these prefixes.
  path_prefixes:
    - "/etc/"
    - "old.reddit.com/"

  # Skip targets containing these placeholder tokens.
  placeholder_tokens:
    - ""
    - "{slug}"
    - "YYYY-MM-DD"

Example snippet

targets:
  - name: framework-docs-and-skills
    base_dir: "{repo_root}"
    include_globs:
      - "ls/docs/**/*.md"
      - "ls/skills/**/*.md"
      - "ls/templates/**/*.md"

kilo_manifest_discovery:
  manifests:
    - "{repo_root}/kilo.jsonc"
    - "/home/user/.config/kilo/kilo.jsonc"

Validation behavior

  • Skips external URLs (http, https, mailto, etc.).
  • Resolves relative targets from the source file's directory.
  • Also tries repo-root resolution for repo-absolute style links like ls/... or docs/....
  • Applies ignore controls in this order: source glob skip -> placeholder/prefix/regex/pseudo-path skip -> strict path/anchor checks.
  • Validates config section shapes up front and reports schema errors instead of raw tracebacks.
  • Reports unreadable source markdown, anchor targets, and state files instead of treating them as clean results.
  • Flags:
  • missing_path
  • missing_anchor
  • unreadable_source
  • unreadable_anchor_target
  • Includes Kilo manifest discovery notes in report for observability.

Safety and hardening

  • Input hostile-by-default handling.
  • Sanitized text fields and bounded lengths.
  • Interval guard to avoid noisy repeated runs.
  • Optional jitter to reduce post-login contention.

Related references

  • ls/docs/TOOLING_POLICY.md
  • ls/docs/INPUT_HARDENING_STANDARD.md
  • ls/skills/ls-cron-orchestrator/SKILL.md

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.