ai-review SKILL.md skillA
ai-review from tingyulu/myr2d2 is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add tingyulu/myr2d2/ai-review@git:20260828.455517dPins git:20260828.455517d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- tingyulu/myr2d2
- Path
skills/ai-review/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260828.455517d, committed Aug 28, 2026
- First version recorded
- Aug 20, 2026
- Size
- 11,142 bytes
- Repository stars
- 18
- License
- a license file GitHub does not identify
把一份產出送給「另一個模型」做二審，消化意見後才寫最終回報。附單檔 POSIX shell 腳本（預設走 Codex CLI，可用 AI_REVIEW_CMD 換成任何後端）與 code／copy／research 三份 rubric；偵測不到後端時明講「本次僅自審」而不是靜默跳過，也不會中斷你的流程。當使用者說「送二審」「跨模型 review」「找另一個模型看一下」「二審」「ai-review」時觸發。⚠️ 送出去的內容就是給第三方模型看，憑證與個資自己把關。 English triggers: "second opinion", "cross-model review", "have another model review this", "ai review".
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# /ai-review — 跨模型二審
把剛做完的東西（程式碼、文案、研究報告）交給**另一個模型家族**看一眼，
把它的意見**消化進**你的最終回報 —— 而不是自己審自己。
> 🤖 R2-D2 時刻：R2 與 C-3PO 吵了六集，但每次都是那個「跟你看法不同的傢伙」
> 補上你漏掉的那一半。自己檢查自己，只會確認自己本來就相信的事。
## 為什麼需要
自審有結構性上限：**判準是自己定的，推理自洽就過關**。同一個模型跑「再檢查一次」，
多半只會把原本的結論換句話說 —— 它沒有理由懷疑自己的前提。
換一個模型家族來看，它不受你的推理路徑約束，會抓到你抓不到的東西：
被自己判成「顯然沒問題」的假設、沒標來源的宣稱、會反轉結論的漏洞。
這支 skill 是 [`damage-report`](../damage-report/SKILL.md) 的**升級路徑**：
damage-report 是自審五問，接上 ai-review 就變成**自審＋異質視角**。
## 動作
1. **決定送什麼**：要被審的那份東西（檔案，或用 `-` 讀 stdin）。
🔒 送出去就是給第三方模型看 —— 憑證、金鑰、個資、客戶資料**自己判斷不要送**。
2. **選 rubric**：`code`（程式碼）／`copy`（對外文案）／`research`（研究與決策文件），
或直接給你自己的 rubric 檔路徑。
3. **跑**：
```bash
<本skill目錄>/scripts/ai-review.sh <檔案> --rubric code --context "這東西要解什麼"
```
常用選項：`--model`／`--effort low|medium|high`／`--strict`／`--soft-fail`／`--no-save`。
⚠️ **一律用完整路徑呼叫，不要打裸的 `ai-review`** —— `ai-review` 是個很容易撞名的名字，
你的 `PATH` 上可能已經有另一支同名執行檔（別的工具、你自己寫的、或這支 skill 的私人變體）。
打裸命令名會叫到那一支，而且它可能**看起來也在做二審**，你不會發現叫錯了。
4. **看狀態**：除用法錯誤（exit 1，訊息在 stderr）外，stdout 最後一行一定是 `AI_REVIEW_STATUS: <狀態>`。
- `ok` → 進第 5 步。
- `skipped_*` → **本次沒有二審**（沒裝／沒登入）；腳本已在畫面上印好逐步引導，
照著做或跳過都行。**回報時明講「本次僅自審」**，不要假裝審過。
…Read the whole file at its exact version.
How to install
mdr add tingyulu/myr2d2/ai-review@sha256:24a648ecd2549768The line at the top of this page pins the label git:20260828.455517d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_37udpob5qqlhg7z3)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Aug 20, 2026 and Aug 28, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260828.455517d latest | 2026-08-28 | 455517d | 11,142 B | A | view · diff |
| git:20260821.976ad8e | 2026-08-21 | 976ad8e | 11,018 B | A | view · diff |
| git:20260821.efb54e7 | 2026-08-21 | efb54e7 | 10,976 B | A | view · diff |
| git:20260820.562745e | 2026-08-20 | 562745e | 10,826 B | A | view · diff |
| git:20260820.7160956 | 2026-08-20 | 7160956 | 10,414 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11142 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
tingyulu/myr2d2 · 18 stars · license a license file GitHub does not identify · pushed 2026-10-16 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_37udpob5qqlhg7z3 GET https://markdownregistry.com/api/v1/resolve?ref=tingyulu/myr2d2/ai-review GET https://markdownregistry.com/api/v1/blob/24a648ecd25497689d189ca81d5ed1d9d3b74906566067b350250e5dee61d2f9
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.