hld-review SKILL.md skillA

hld-review from thameema/memnos is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add thameema/memnos/hld-review@git:20261028.22056eb

Pins git:20261028.22056eb in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
thameema/memnos
Path
plugins/tommy-design-review/skills/hld-review/SKILL.md
Versions recorded
1
Latest version
git:20261028.22056eb, committed Oct 28, 2026
Size
2,256 bytes
Repository stars
5
License
Apache-2.0

Review a high-level design (HLD): a design doc, RFC, architecture proposal or "how should we build X" plan. Use before implementation starts, or when asked to review, challenge or sign off a system design.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# HLD review

Review the design against the real system, not against the doc's own claims. Read the design first, then read the code and config it says it touches. A finding that cites a file or a number beats one that cites a principle.

## Steps

1. **State the goal and non-goals** in two lines. If the doc doesn't make them clear, that is finding #1.
2. **Check the boundaries.** Which components own which data? Where does each request cross a process, network or trust boundary? Name every new boundary and what authenticates it.
3. **Walk the failure modes.** For each dependency: what happens when it is slow, down, or returns garbage? Look for retries without backoff or idempotency, missing timeouts, unbounded queues, and partial failure across two writes.
4. **Check data and migration.** Schema changes, backfills, rollback path, and whether old and new versions can run side by side during a rolling deploy.
5. **Check scale and cost** with numbers: expected load, the hot path, the largest table or fan-out, and what grows without bound.
6. **Check security and privacy**: who can read or write what, where secrets live, what gets logged, tenant or namespace isolation.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add thameema/memnos/hld-review@sha256:9c6f43f9e28fdeac

The line at the top of this page pins the label git:20261028.22056eb, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_3rcqjh5cd7ot3bd5.svg)](https://markdownregistry.com/a/art_3rcqjh5cd7ot3bd5)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 28, 2026.

versioncommittedcommitsizeaudit
git:20261028.22056eb latest2026-10-28 22056eb 2,256 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (2256 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

thameema/memnos · 5 stars · license Apache-2.0 · pushed 2026-11-05 · branch master

API

GET https://markdownregistry.com/api/v1/artifacts/art_3rcqjh5cd7ot3bd5
GET https://markdownregistry.com/api/v1/resolve?ref=thameema/memnos/hld-review
GET https://markdownregistry.com/api/v1/blob/9c6f43f9e28fdeac48f61ecb4b109af5f1e31737e69d9653721dc61a975bfd8a

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from thameema/memnos

memnos-memory SKILL.md skill
thameema/memnos · docs/guides/clients/claude-desktop-skill/SKILL.md · Long-term memory via memnos. Use when the user references past work, prior decisions, preferences, people, projects, or…
git:20260610.d5aecbc · audit A · 5 stars
lld-review SKILL.md skill
thameema/memnos · plugins/tommy-design-review/skills/lld-review/SKILL.md · Review a low-level design (LLD): module and class structure, interfaces, data models, schemas, API contracts, sequence…
git:20261028.22056eb · audit A · 5 stars
explain SKILL.md skill
thameema/memnos · plugins/tommy-explain/skills/explain/SKILL.md · Explain code, a design, a bug, an error, a review finding or a trade-off in plain English with a concrete real-world…
git:20261029.fa6bed5 · audit A · 5 stars
performing-live-cluster-penetration-testing SKILL.md skill
thameema/memnos · plugins/tommy-pentest/skills/performing-live-cluster-penetration-testing/SKILL.md · Run a structured, authorized internal penetration test from INSIDE a live Kubernetes cluster (Azure AKS focus). Covers…
git:20261102.cd6affd · audit B · 5 stars
running-dynamic-exploitation-with-strix SKILL.md skill
thameema/memnos · plugins/tommy-pentest/skills/running-dynamic-exploitation-with-strix/SKILL.md · Run a dynamic, active-exploitation pentest with the self-hosted Strix CLI (usestrix/strix, Apache-2.0) — autonomous AI…
git:20261105.034d2b0 · audit B · 5 stars
qa-backend SKILL.md skill
thameema/memnos · plugins/tommy-qa/skills/qa-backend/SKILL.md · QA backend logic: design and run unit, integration and edge-case tests for services, jobs, database code and business…
git:20261028.22056eb · audit A · 5 stars
qa-frontend SKILL.md skill
thameema/memnos · plugins/tommy-qa/skills/qa-frontend/SKILL.md · QA a web frontend: build a test plan from the real UI and run it in a real browser, including click paths, mixed…
git:20261028.22056eb · audit A · 5 stars
qa-rest-api SKILL.md skill
thameema/memnos · plugins/tommy-qa/skills/qa-rest-api/SKILL.md · QA a REST API: contract, status codes, validation, auth and authorization, pagination, idempotency and error shapes…
git:20261028.22056eb · audit A · 5 stars

Every file in thameema/memnos

Browse by kind, by grade A, or by owner.