Do you need to do this?
No. The download works the same either way. Verifying adds confidence for the security conscious, and for anyone on an untrusted network who wants to rule out a corrupted or modified file. If that is not a concern for you, skip it and follow the install guide.
What a checksum is
A SHA-256 checksum is a short fingerprint of a file. The same file always produces the same fingerprint, and changing even one byte produces a different one. Each Clean Language release publishes the checksum of clean-language.zip. If the checksum you calculate for your copy matches the published value, your download is identical to the release and reached you intact.
How to verify
- Download the skill and its published checksum.
- Calculate the checksum of the file you downloaded. Open a terminal in the folder that holds
clean-language.zipand run the command for your system.Windows (PowerShell)
Get-FileHash clean-language.zip -Algorithm SHA256macOS
shasum -a 256 clean-language.zipLinux
sha256sum clean-language.zip - Compare the value your computer prints with the value in
clean-language.zip.sha256. A match means the download is authentic. If the two differ, delete the file, download it again, and check once more.
Why this is safe to skip
The skill is prose instructions and reference material only. It contains no executable code and makes no network calls, and every file is publicly reviewable in the GitHub repository. The checksum confirms the file arrived intact. The skill is safe to use whether or not you check it.