review SKILL.md skillA
review from ylxmf2005/longrein is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add ylxmf2005/longrein/review@git:20260923.8eb4b09Pins git:20260923.8eb4b09 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- ylxmf2005/longrein
- Path
skills/review/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260923.8eb4b09, committed Sep 23, 2026
- First version recorded
- Jul 25, 2026
- Size
- 4,033 bytes
- Repository stars
- 11
- License
- none declared
用户要求 review、CR，让你看看某个改动、PR、MR、设计或方案有没有问题，或者要判断它能不能合并、交付时使用。独立冷读准确的对象，查完影响范围，每个问题先试着推翻再报告，最后给出结论。只想弄懂改了什么时用 walkthrough；自己刚写完代码的日常自查不用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# review 像一位没参与编写、熟悉这个项目的维护者那样冷读：不采信作者的说法，自己从代码和证据重建判断。作者的摘要、测试名称和之前的评审意见都只是线索。 ## 锁定对象 先确认审的是什么：哪个分支、提交或 diff，和哪个版本比较，工作树里有没有未提交的改动，这次改动要达成什么（有 `.agents/tasks/<任务>/shape.md` 时，读其中的目标和验收标准）。对象或比较版本不清楚、又会影响结论时，先查清或问清，不自己挑一个方便的版本。 ## 查完影响范围，按风险分配精力 从改动出发，列出它真正影响到的东西：改动的每个文件，以及受影响的调用方、公共接口、权限、数据和状态、异步过程和下游消费者。每一项要么检查过，要么有证据说明不受影响，要么写成没查到的缺口。精力按风险分配：公共接口、安全边界、数据与恢复路径、热路径值得深挖，其余看一遍即可。发现第一个问题后继续看完。 除了正确性，也看改动本身是否干净：每处改动能否对应到本次目标，有没有夹带范围外的修改、重复实现或绕开项目已有做法，测试是否真正约束了新行为，新增的抽象和公共接口以后由谁维护。 只把本次引入或明显放大的问题算在这次改动上。既有问题只在用户要求整体审计，或它会改变本次结论时提出，并注明是既有的。 ## 每个问题都要走通证据 报告的每个问题都要说清：什么输入、状态或调用方会触发它，经过哪些代码，最后导致什么错误结果、破坏什么约定或带来什么长期成本，并附上能打开的证据（代码位置、命令输出、日志或运行结果）。风格偏好、走不通的理论路径、说不出具体代价的"应该重构"，都不算问题。 报告前把每个候选当作未证实的假设，主动找能推翻它的东西：上游校验、类型或权限保证、调用约定、已有的补偿逻辑、相反的运行结果。被推翻的删掉；部分成立的改正描述；证据不够的写成待查的缺口，不当作问题报告。 ## 严重程度和是否需要用户决定 每个问题标一个严重程度： - **高**：现实中会触发的严重错误，如数据损坏、越权、主流程失败，不修不能合并。 - **中**：具体、会发生的错误，或明显的维护代价，应该修。 - **低**：影响小，但值得改进。 再标明它的处理是否需要用户决定。修复需要改变目标或范围、接受某种风险，或引入超出原请求的机制（迁移、兼容层、新的公共接口、大规模重构）时，需要用户决定；其余可以直接修。 ## 给出结论 结论只有三种： - **可以合并**：没有高或中的问题，关键证据足够。 - **需要修改**：有可以直接修的高或中问题。 - **需要你决定**：有问题的处理需要用户决定；写清要决定什么、有哪些选择、各自的代价。 可能改变结论的证据缺口要写明，不能默认当作通过。 ## 评审和修改分开 …
Read the whole file at its exact version.
How to install
mdr add ylxmf2005/longrein/review@sha256:26fe03cabf37f013The line at the top of this page pins the label git:20260923.8eb4b09, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4jd3wwmzvx2jnea7)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jul 25, 2026 and Sep 23, 2026, about one every 15 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260923.8eb4b09 latest | 2026-09-23 | 8eb4b09 | 4,033 B | A | view · diff |
| git:20260728.b57c5d5 | 2026-07-28 | b57c5d5 | 5,902 B | A | view · diff |
| git:20260728.0720cda | 2026-07-28 | 0720cda | 5,172 B | A | view · diff |
| git:20260727.106aa2e | 2026-07-27 | 106aa2e | 4,729 B | A | view · diff |
| git:20260725.cfce686 | 2026-07-25 | cfce686 | 4,423 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4033 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
ylxmf2005/longrein · 11 stars · license none declared · pushed 2026-10-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4jd3wwmzvx2jnea7 GET https://markdownregistry.com/api/v1/resolve?ref=ylxmf2005/longrein/review GET https://markdownregistry.com/api/v1/blob/26fe03cabf37f013161fb8f075b26f89b514fa0c5e0ffe359c028df6c024bf97
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from ylxmf2005/longrein
Every file in ylxmf2005/longrein