spec-branch-review SKILL.md skillA
spec-branch-review from hhu3637kr/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add hhu3637kr/skills/spec-branch-review@git:20260810.f2798ebPins git:20260810.f2798eb in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- hhu3637kr/skills
- Path
spec-branch-review/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260810.f2798eb, committed Aug 10, 2026
- First version recorded
- Aug 8, 2026
- Size
- 24,170 bytes
- Repository stars
- 146
- License
- none declared
审查一个功能分支的实现质量：先建立判据（有需求文档则读原文，没有则从 spec/commit/PR/注释/测试/调用方/仓库惯例逐层重建），再实测缺陷而非静态猜测，最后按可用判据出维度结论。当用户要求「审查这个分支」「review 这次实现」「看看代码实现情况」时使用，无论有无需求文档。只做审查与定级，不做修复。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
## 定位 审查**已完成的功能分支**：它是否真的做到了该做的事，代码本身站不站得住，AI 和流程用得对不对。 产出是**判断**，不是修复。除非用户明确要求，不改一行业务代码。 不适用：单文件 diff 速览、PR 评论逐行标注、纯安全审计（走 security-reviewer）。 ## 铁律 1. **先建立判据，再看代码。** 没有判据就没有「符合/不符合」，只有「我觉得」。判据首选需求原文（给了链接就读完，含被截断的表格和附件）；**没有需求文档时不要跳过这一步，改用「判据重建」自己造一份**，见 §1b。 2. **每个缺陷必须实测复现。** 静态读代码只能产出「可能有问题」。写一个探针脚本跑出来，把输出贴进报告。做不到实测的标 `[INFERENCE]`。 3. **只读，不写。** 用 `git archive` 导出到临时目录做验证，不用 `git worktree`、不 checkout、不改工作区。项目若有 git 红线规则（多数 spec 驱动项目有），任何写类 git 操作都要先经用户批准。 4. **用它自己的尺子量它。** 分支内 spec 的「验收标准」章节是最有力的判据。自己定的标准没达成，比外部标准没达成更硬。 5. **区分存量与本次引入。** 每个缺陷都要 `git show master:<file>` 对一次。存量问题不该算在这次交付头上，本次引入的回退要重点标。 ## 流程 ### 1. 定位分支 分支常常不在本地： ```bash git ls-remote --heads origin # 远端全量分支，本地 git branch -a 可能看不到 git fetch origin <branch> git log --oneline master..origin/<branch> git diff --stat master...origin/<branch> ``` 飞书需求文档（先读 `skill://lark-doc`）： ```bash lark-cli docs +fetch --doc "<url>" --doc-format markdown --as user --format json ``` **长文档会被截断**。返回里出现 `[Some lines truncated]` 或表格只剩表头时，用 block 定位补读： ```bash # 先拿 block id lark-cli docs +fetch --doc "<url>" --scope keyword --keyword "关键词" --format json # 再精读那个 block（表格必须这样读，keyword 模式对表格只返回 thead） …
Read the whole file at its exact version.
How to install
mdr add hhu3637kr/skills/spec-branch-review@sha256:8da57332eab01007The line at the top of this page pins the label git:20260810.f2798eb, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_fh7d27hpq3b4cnbm)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Aug 8, 2026 and Aug 10, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260810.f2798eb latest | 2026-08-10 | f2798eb | 24,170 B | A | view · diff |
| git:20260808.f722096 | 2026-08-08 | f722096 | 19,179 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (24170 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
hhu3637kr/skills · 146 stars · license none declared · pushed 2026-11-06 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_fh7d27hpq3b4cnbm GET https://markdownregistry.com/api/v1/resolve?ref=hhu3637kr/skills/spec-branch-review GET https://markdownregistry.com/api/v1/blob/8da57332eab01007810ac3e67da023d76c2473225d292d033dbc9f8247f80ab7
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.