dev-plan-review SKILL.md skillA
dev-plan-review from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add devcodex-labs/devcodex/dev-plan-review@git:20261021.9117d5cPins git:20261021.9117d5c in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- devcodex-labs/devcodex
- Path
content/skills/dev-plan-review/SKILL.md- Versions recorded
- 5
- Latest version
- git:20261021.9117d5c, committed Oct 21, 2026
- First version recorded
- Jul 30, 2026
- Size
- 23,052 bytes
- Repository stars
- 432
- License
- AGPL-3.0
技术方案验证（两阶段质量门禁）— PR-1 CP2 前自检 + PR-2～PR-7 详细验证，阻断不合格方案进入编码.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Dev Plan Review Skill ## 定位 本 Skill 分为**两阶段**执行，确保方案在用户确认前已通过基础检查： ```text 阶段一（CP2 前·AI 内部自检）：PR-1 需求完整性 → 🔴 不通过则修正后重检，不呈给用户 阶段二（CP2 后·详细验证）：PR-2~PR-7 → 🔴 阻断回 CP2 → 全通过 → [影响评估] → CP3 ``` > 🔴 不可跳过。`docs` 子类型（豁免）和 `plan-review` 子类型（防递归）除外。 > > **R9 / R12**：顺序「方案 → PR-1 → 确认 CP2 → PR-2~PR-7 → CP3 → 编码」。呈交方案时独立 `03-方案复审*` 与 `.memory/review-execution-pr1.json` 引用同一候选摘要和 ReviewState；生成与回读方式见 `review-checklist`。sessions 通过符号、报告示例或通过话术不能替代证据。缺失时 Stop 只投影 `processGaps+=pr1-skipped` 诊断；R10 精确任务状态校验和宿主权限边界见 `cp-gate`。 > ⚠️ 边界说明：本 Skill 只负责**编码前**的方案质量门禁，不覆盖执行后的关键产物复审；执行后的稳定性确认由 `10-dev.instructions.md` 中的“ECR 执行闭环复审”规则负责。 PR-1 与 PR-2~PR-7 各阶段开始前必须由 `review-checklist` Owner 形成 candidate-bound `ReviewExecutionPlanV1`；BlockerSnapshot、执行命令与零发现结论形成 `ReviewEvidenceReceiptV1`。方案或规则/Skill/Probe/影响图变化后旧 receipt 立即 stale，不得因文件少复用旧阶段结论。 CP2 候选进入阶段二前必须先通过 `RequiredCandidateEvidenceGate`：技术方案中存在 fresh `CandidateReviewBundleV1`，且 `phaseKind=CP2`、`TDMatrix`、`BlockerSnapshot`、`ClaimEvidenceMatrix` 均完整。机器负向样本由 `scripts/lib/candidate-review-bundle.js` 与 `npm run test:candidate-review-bundle` 覆盖；缺失、陈旧、软确认绕过或 open blocker 均回 CP2 修订。 ## 豁免 …
Read the whole file at its exact version.
How to install
mdr add devcodex-labs/devcodex/dev-plan-review@sha256:5f80ea3ea8cbca81The line at the top of this page pins the label git:20261021.9117d5c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_i67oneb2px5f2kwi)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jul 30, 2026 and Oct 21, 2026, about one every 21 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261021.9117d5c latest | 2026-10-21 | 9117d5c | 23,052 B | A | view · diff |
| git:20260908.6caf1bf | 2026-09-08 | 6caf1bf | 22,585 B | A | view · diff |
| git:20260829.ef3a006 | 2026-08-29 | ef3a006 | 22,445 B | A | view · diff |
| git:20260826.937258a | 2026-08-26 | 937258a | 22,435 B | A | view · diff |
| git:20260730.6ee304a | 2026-07-30 | 6ee304a | 22,363 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (23052 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_i67oneb2px5f2kwi GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/dev-plan-review GET https://markdownregistry.com/api/v1/blob/5f80ea3ea8cbca8137ad77d1b6592ea8ee833ee6295f592e86f52b28d1eea03b
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.