Home / devcodex-labs / devcodex · GitHub

review-checklist SKILL.md skillA

review-checklist from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add devcodex-labs/devcodex/review-checklist@git:20261021.9117d5c

Pins git:20261021.9117d5c in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: devcodex-labs/devcodex
Path: content/skills/review-checklist/SKILL.md
Versions recorded: 5
Latest version: git:20261021.9117d5c, committed Oct 21, 2026
First version recorded: Jul 30, 2026
Size: 20,726 bytes
Repository stars: 432
License: AGPL-3.0

复审清单整理与审查规范 — 创建、冻结、证据执行、状态更新与收敛关闭.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Review Checklist Skill

## 职责

当任务需要正式复审、ECR、发布前复审、多轮收敛审查、外部 finding 批次处理或用户要求“复审直至收敛 / 按清单复审”时，本 Skill 负责创建和维护复审清单。

复审清单是执行真相源之一，不是报告里的临时段落。没有清单文件、没有逐项证据、没有状态更新或没有遗漏逃逸分析时，不得宣告复审已收敛。

## 触发条件

| 场景 | 是否触发 |
|------|:--------:|
| 用户要求复审、再次复审、收敛复审、全维度复审 | 必须 |
| dev/fix 的 ECR 执行闭环复审涉及控制面、多文件、发布、模板、validate 或部署副本 | 必须 |
| 外部审查报告、AI review finding、audit issue、代码评审发现进入批量处理 | 必须 |
| 发布前审查、release readiness、tag/publish 前风险复查 | 必须 |
| CP 确认后命中高风险、多模块、公开契约、配置、安全、package、docs consumer、控制面或多真相源场景 | 必须 |
| 低风险单文件 typo 且无正式复审要求 | N/A + skipReason |

## 清单文件要求

| 字段 | 要求 |
|------|------|
| `reviewScope` | 本轮复审对象、目标版本、active requirement/task/bug id |
| `sourceAnchors` | 需求、技术方案、用户文档、审查报告、finding 来源或 release 目标 |
| `frozenChecklist` | 冻结后的检查项，不允许复审中静默删除 |
| `dimensionSet` | 本轮维度集合；R2+ 必须体现 `ReviewDimensionDeltaGate` |
| `evidence` | 每项绑定命令、代码落点、文档路径、页面、截图、构建产物或反向缺席扫描 |
| `status` | `todo / running / passed / failed / blocked / N/A` |
| `skipReason` | N/A 或未执行项必须写明原因、残余风险和替代证据 |
| `escapeRecords` | 复审或实施中发现原清单遗漏时的追加记录，字段见 `ReviewEscapeRecordGate` |
| `closure` | 收敛结论、未关闭项、下一步和报告引用 |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add devcodex-labs/devcodex/review-checklist@sha256:e6a6fd33c93d5026

The line at the top of this page pins the label git:20261021.9117d5c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_fsfvuze7vu7ol2g5.svg)](https://markdownregistry.com/a/art_fsfvuze7vu7ol2g5)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between Jul 30, 2026 and Oct 21, 2026, about one every 21 days.

version	committed	commit	size	audit
git:20261021.9117d5c latest	2026-10-21	9117d5c	20,726 B	A	view · diff
git:20261017.e96e3c4	2026-10-17	e96e3c4	18,318 B	A	view · diff
git:20261017.77d22cc	2026-10-17	77d22cc	17,716 B	A	view · diff
git:20260908.6caf1bf	2026-09-08	6caf1bf	16,563 B	A	view · diff
git:20260730.6ee304a	2026-07-30	6ee304a	15,785 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (20726 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_fsfvuze7vu7ol2g5
GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/review-checklist
GET https://markdownregistry.com/api/v1/blob/e6a6fd33c93d50269d0414130292d6a66a61ee0d021460b7111ec1b7f73eb473

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from devcodex-labs/devcodex

accessibility-i18n SKILL.md skill

devcodex-labs/devcodex · content/skills/accessibility-i18n/SKILL.md · 无障碍与国际化专家 Owner — 当任务涉及可访问性、键盘操作、焦点、屏幕阅读器、ARIA、语言地区、本地化、RTL、翻译资源、用户可见文案或多语言文档时使用；要求把包容性体验和本地化验证绑定到真实用户路径。