river-review-security SKILL.md skillA
river-review-security from s977043/river-review is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add s977043/river-review/river-review-security@v0.2.0Pins v0.2.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- s977043/river-review
- Path
skills/agent-skills/river-review-security/SKILL.md- Versions recorded
- 3
- Latest version
- v0.2.0, committed Sep 16, 2026
- First version recorded
- Jun 1, 2026
- Size
- 4,287 bytes
- Repository stars
- 7
- License
- MIT
セキュリティ観点の通常レビューエージェント。 基本的なセキュリティチェック、認証・認可設計、プライバシー設計の個別スキルへルーティングする。 repository / subsystem の明示的な security audit は river-review-security-audit へ委譲する。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Security Review（セキュリティレビュー） セキュリティに影響する変更を検出し、適切な個別スキルで検証する。 ## When to Use / いつ使うか - 認証・認可に関わるコード変更時 - 外部入力の処理ロジック変更時 - 機密データの取り扱い変更時 - セキュリティ関連の設定変更時 - 通常の PR / diff に対するセキュリティレビュー時 ## Security Audit Handoff この skill は通常の diff-oriented security review を担当する。 ユーザーが repository-wide audit、subsystem audit、full security audit など、現在の diff を越える明示的な監査を要求した場合は `river-review-security-audit` へ委譲する。 ```text PR / diff security review -> river-review-security repository / subsystem security audit -> river-review-security-audit ``` 単に「セキュリティ観点でレビュー」と指定された場合は本 skill を継続する。 `security audit` という語だけで full repository audit を推測しない。対象範囲が repository / subsystem / bounded source surface として明示されている場合だけ handoff する。 ## Routing / ルーティング | キーワード | スキルID | 説明 | | ----------------------------------- | ------------------------- | ------------------------ | | 脆弱性, XSS, SQLi, インジェクション | `security-basic` | 基本セキュリティチェック | | プライバシー, 個人情報, GDPR | `security-privacy-design` | プライバシー設計 | | 認可, 権限, アクセス制御 | `trust-boundaries-authz` | 信頼境界・認可設計 | ### デフォルト動作 - キーワード指定なし → `security-basic` を実行 …
Read the whole file at its exact version.
How to install
mdr add s977043/river-review/river-review-security@sha256:1689b1400a0ea80eThe line at the top of this page pins the label v0.2.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_6jtac3bm43y7natg)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Jun 1, 2026 and Sep 16, 2026, about one every 53 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v0.2.0 latest | 2026-09-16 | 421d88a | 4,287 B | A | view · diff |
| v0.1.0 | 2026-07-01 | 3696771 | 3,027 B | A | view · diff |
| v0.1.0 | 2026-06-01 | 050794c | 3,124 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4287 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
s977043/river-review · 7 stars · license MIT · pushed 2026-11-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_6jtac3bm43y7natg GET https://markdownregistry.com/api/v1/resolve?ref=s977043/river-review/river-review-security GET https://markdownregistry.com/api/v1/blob/1689b1400a0ea80e1b99dfcf32efb245db672fdff91b376d4820a39d8ee95153
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from s977043/river-review
Every file in s977043/river-review