vst3-review SKILL.md skillA
vst3-review from gourdja/sonic-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add gourdja/sonic-skills/vst3-review@git:20260515.3a80b75Pins git:20260515.3a80b75 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- gourdja/sonic-skills
- Path
skills/vst3-review/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260515.3a80b75, committed May 15, 2026
- Size
- 4,862 bytes
- Repository stars
- 4
- License
- Unlicense
Reviews VST3 plugin implementations for spec compliance, host compatibility, and correctness. Use when the user asks to review a VST3 plugin, check bus arrangements, audit parameter handling, or verify their process() callback is safe. Trigger on phrases like "review my VST3 plugin", "check VST3 bus arrangement", "is my VST3 process safe", "audit my IAudioProcessor", or when you see IComponent, IAudioProcessor, IEditController, ProcessData, or Vst:: namespaced types in the code.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# VST3 Plugin Review VST3's split controller/processor model and bus negotiation are the most common sources of host incompatibility. Issues are rarely compile-time errors — they surface as broken recall, silence, or crashes in specific DAWs. ## Step 0 — Run universal checks first Invoke `audio-dsp-review` and `audio-numerics-review` before this skill. This skill adds VST3-specific spec compliance and host compatibility checks on top; it does not replace realtime-safety or numerics reviews. ## Step 1 — Identify plugin structure Locate the three core interfaces and their ownership: | Interface | Thread | Responsibilities | |-----------|--------|-----------------| | `IComponent` | Main thread | Bus layout, activation, state save/load, unit info | | `IAudioProcessor` | Audio thread in `process()`; main thread otherwise | Bus arrangement negotiation, latency, processing setup | | `IEditController` | Main thread | Parameter definitions, UI, MIDI mapping, `setComponentState` | | `IConnectionPoint` | Main thread | Processor↔controller messaging via `notify()` | ## Step 2 — Scan for VST3-specific violations | Violation | Where | Risk | |-----------|-------|------| …
Read the whole file at its exact version.
How to install
mdr add gourdja/sonic-skills/vst3-review@sha256:2ecf9490cc053759The line at the top of this page pins the label git:20260515.3a80b75, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_hkoo4vk5fhqxteia)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on May 15, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4862 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
gourdja/sonic-skills · 4 stars · license Unlicense · pushed 2026-10-12 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_hkoo4vk5fhqxteia GET https://markdownregistry.com/api/v1/resolve?ref=gourdja/sonic-skills/vst3-review GET https://markdownregistry.com/api/v1/blob/2ecf9490cc053759552d22a0b9715f75f8f6ff8bf207ec276f5d9096064df256
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.