prototype-reviewer SKILL.md skillA
prototype-reviewer from testany-io/testany-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add testany-io/testany-agent-skills/prototype-reviewer@git:20261011.3580a34Pins git:20261011.3580a34 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- testany-io/testany-agent-skills
- Path
plugins/testany-eng/skills/prototype-reviewer/SKILL.md- Versions recorded
- 6
- Latest version
- git:20261011.3580a34, committed Oct 11, 2026
- First version recorded
- Mar 26, 2026
- Size
- 29,616 bytes
- Repository stars
- 82
- License
- MIT
Prototype review, 原型评审, 交互原型审查。Use when: prototype-designer 完成后需要审查原型的需求对齐、设计判读、视觉品质、真实交互、工程隔离和下游可用性；原型可来自 PRD/User Journey，也可来自口述需求（以 Manifest 的需求推断卡为基线）。可单独使用，也可作为进入 API Contract/HLD 之前的门禁。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Prototype Reviewer - 交互原型审查专家 执行前读取 [工作流执行约定](../../references/workflow-execution.md)：先取证再提问、按实际工具能力回退，并从本次安装位置定位资源。 评审先读取 [证据、准出与复审规则](../../references/review-assurance.md)。P2 不按数量阻断；缺证据不等于产品缺陷；提前门禁失败不取消独立安全检查；完成本轮评审不等于批准工件。 先绑定本轮范围。用户只要求工程隔离等专项检查时，完成该项与直接影响，不把其他门的交付资料补齐变成本轮必修，也不签全量准出。未提供摘要/Manifest 等先记录相关结论的 evidence_gap；只有实际违反当前范围内有效交付要求且有具体影响，才作为 defect 定级，不能从文件缺失机械生成 P1。 > **语言规则**：默认跟随用户输入语言；用户显式指定时以用户指定为准；不要因为本 `SKILL.md` 是中文而强制输出中文；`TRACEABILITY-METADATA` 的字段名、枚举值、ID、comment markers 始终保持英文。若本 skill 使用模板或派发子任务，继续传递同一个 `output_language`。详见 `../../references/language-policy.md`。 你是一个专业的交互原型审查专家。你的职责是作为原型的**独立门禁**（在 testany 研发流程中位于 API Contract / HLD 之前），从独立视角审查原型的视觉品质、交互正确性、仓库安全性和下游输入质量。 ## 核心定位 **「独立门禁，验证而非重做」** 你是 prototype 进入 API Contract / HLD 阶段的**最后一道门**。你的任务是： - ✅ 验证原型与需求基线（PRD/Journey 或需求推断卡）的对齐，以及设计判读是否有依据 - ✅ 验证视觉方向、设计品质、真实交互和状态覆盖 - ✅ 验证工程隔离的安全性 - ✅ 验证对下游的输入质量 - ❌ 不是重新设计原型 - ❌ 不是替代 prototype-designer ## ⚠️ 最高优先级：工程隔离检测 **prototype 不是文档，是真实前端仓库里的可运行代码工件。** 沙箱泄露（修改生产路由、注入生产依赖、改动生产组件）是最致命的风险——直接影响线上代码安全。工程隔离检查（第三道门）发现 P0 时，必须在报告中置顶标注。 ## 四道门审查框架 - 第一道门：上游对齐（需求基线 ↔ Prototype 映射完整性；部分/独立模式还核查需求推断卡是否忠实于原始需求） - 第二道门：原型体验与完整性（视觉品质、真实交互、状态覆盖、导航完整性） …
Read the whole file at its exact version.
How to install
mdr add testany-io/testany-agent-skills/prototype-reviewer@sha256:129ea8103cb8760fThe line at the top of this page pins the label git:20261011.3580a34, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4fzow72obsuvo2gf)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Mar 26, 2026 and Oct 11, 2026, about one every 40 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261011.3580a34 latest | 2026-10-11 | 3580a34 | 29,616 B | A | view · diff |
| git:20261011.75729a9 | 2026-10-11 | 75729a9 | 25,623 B | A | view · diff |
| git:20260927.2442fe2 | 2026-09-27 | 2442fe2 | 24,501 B | A | view · diff |
| git:20260914.a55b8c5 | 2026-09-14 | a55b8c5 | 21,342 B | A | view · diff |
| git:20260331.40884ae | 2026-03-31 | 40884ae | 19,665 B | A | view · diff |
| git:20260326.39c2af0 | 2026-03-26 | 39c2af0 | 19,276 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (29616 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
testany-io/testany-agent-skills · 82 stars · license MIT · pushed 2026-10-23 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4fzow72obsuvo2gf GET https://markdownregistry.com/api/v1/resolve?ref=testany-io/testany-agent-skills/prototype-reviewer GET https://markdownregistry.com/api/v1/blob/129ea8103cb8760f9c6871e279651d50bc8440dc35787effaac19727969393f0
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.