Optional

Verify your download.

This step is optional. If you trust the source, which is the official Clean Language release on GitHub, install the skill without checking anything. Verifying is here for people who want to confirm, for their own peace of mind, that the file arrived exactly as published.

Do you need to do this?

No. The download works the same either way. Verifying adds confidence for the security conscious, and for anyone on an untrusted network who wants to rule out a corrupted or modified file. If that is not a concern for you, skip it and follow the install guide.

What a checksum is

A SHA-256 checksum is a short fingerprint of a file. The same file always produces the same fingerprint, and changing even one byte produces a different one. Each Clean Language release publishes the checksum of clean-language.zip. If the checksum you calculate for your copy matches the published value, your download is identical to the release and reached you intact.

How to verify

  1. Download the skill and its published checksum.
  2. Calculate the checksum of the file you downloaded. Open a terminal in the folder that holds clean-language.zip and run the command for your system.

    Windows (PowerShell)

    Get-FileHash clean-language.zip -Algorithm SHA256

    macOS

    shasum -a 256 clean-language.zip

    Linux

    sha256sum clean-language.zip
  3. Compare the value your computer prints with the value in clean-language.zip.sha256. A match means the download is authentic. If the two differ, delete the file, download it again, and check once more.

Why this is safe to skip

The skill is prose instructions and reference material only. It contains no executable code and makes no network calls, and every file is publicly reviewable in the GitHub repository. The checksum confirms the file arrived intact. The skill is safe to use whether or not you check it.