review-diff SKILL.md skillA
review-diff from urmzd/dotfiles is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add urmzd/dotfiles/review-diff@git:20260530.d3be4ddPins git:20260530.d3be4dd in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- urmzd/dotfiles
- Path
dot_agents/skills/review-diff/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260530.d3be4dd, committed May 30, 2026
- Size
- 5,703 bytes
- Repository stars
- 5
- License
- Apache-2.0
Standardized review of the CURRENT working-tree changes -- staged, unstaged, and untracked -- against an explicit five-dimension rubric (correctness, security, tests, scope-creep, conventions). Emits a prioritized findings list, each with file:line, severity, and a suggested fix. Read-only: it reviews and reports, it does not commit, push, or edit. Use when the user says "review my changes", "review the diff", "look over my staged changes before I commit", or "what's wrong with this PR locally".
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Review Diff Review the working-tree changes against a fixed rubric and emit prioritized, actionable findings. This is the day-to-day review skill that [[assess-quality]] (the quality framework) and [[review-design]] (the design "why" layer) both explicitly hand off to. They set the bar; this skill checks one concrete diff against it. ## Why a rubric is mandatory A review with no rubric drifts into a vibe check and produces a near-empty, low-confidence result (in one observed run, a rubric-less review emitted almost nothing at 0.42 confidence). The five dimensions below are loaded **before** reading the diff so every change is checked against the same axes. If you cannot load the rubric, say so and stop -- do not emit a confident-looking empty review. ## Gather the diff Review everything in the working tree, not just what is staged: ```bash git status --short # the full picture: staged, unstaged, untracked git diff --staged # staged changes git diff # unstaged changes to tracked files git ls-files --others --exclude-standard # untracked files (read each in full) ``` …
Read the whole file at its exact version.
How to install
mdr add urmzd/dotfiles/review-diff@sha256:587c2d914f0f3e3bThe line at the top of this page pins the label git:20260530.d3be4dd, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_a6a5xba3bupvdcj6)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on May 30, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5703 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
urmzd/dotfiles · 5 stars · license Apache-2.0 · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_a6a5xba3bupvdcj6 GET https://markdownregistry.com/api/v1/resolve?ref=urmzd/dotfiles/review-diff GET https://markdownregistry.com/api/v1/blob/587c2d914f0f3e3b186caff2953d9529a4deccdc5414af6913d7105bfe9b161b
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.