pdlc-review SKILL.md skillA
pdlc-review from kanfu-panda/pdlc-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kanfu-panda/pdlc-skills/pdlc-review@git:20261012.f8d1aa2Pins git:20261012.f8d1aa2 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kanfu-panda/pdlc-skills
- Path
skills/pdlc-review/SKILL.md- Versions recorded
- 14
- Latest version
- git:20261012.f8d1aa2, committed Oct 12, 2026
- First version recorded
- May 7, 2026
- Size
- 35,262 bytes
- Repository stars
- 18
- License
- MIT
代码评审（对照设计、自动修复、跑 check、判定能否发布）或文档评审（PRD / 设计 / 测试计划，不写状态机）.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 代码评审
<!-- @include templates/prompts/iron-law.md（已内联于下方，无需另读） -->
⛔ **IRON LAW · 不可违反的硬门禁**
以下规则为**不可协商**的执行约束：
1. **文件必须落盘**：所有带编号（功能ID / 缺陷ID）的文档，必须作为实际文件写入磁盘，不可仅在对话中输出。
2. **阶段必须落章**：每个阶段完成后必须在状态机 `docs/.pdlc-state/<feature-id>.json` 追加 history，不可跳过。
3. **测试必须存在**：进入 `/pdlc-implement` 前，对应测试必须存在且处于红灯状态。违反则中止。
4. **自检必须执行**：段二自检为强制步骤，不得以"已经很好了"为由跳过。
5. **防循环**：段三修复为单次，不递归。无法自动修复的问题记录到报告，继续往下走。
6. **状态必推进**：成功执行某 phase 后 `current_stage` 必须变更。收尾时若发现 `current_stage` 未推进，视为失败并报错，**不得静默返回**（防止外层循环拿滞后的状态空转烧额度）。唯一例外：命中人工点主动 block 时，`current_stage` 保持不变但必须写 `last_phase_result.ok=false` + `blocked_reason`。
**违反任一条 = 立即中止当前命令，输出违规详情，等待人工介入。**
<!-- @include-end templates/prompts/iron-law.md -->
<!-- @include templates/prompts/noninteractive.md（已内联于下方，无需另读） -->
## 非交互模式（`--autonomous`）
若本命令的参数含 `--autonomous`，本命令进入**无人值守**模式，按以下规则处理原本需要人应答的交互点。**参数是唯一真源**：不带 `--autonomous` 即为交互模式，一切照旧正常询问用户；绝不回读状态机 `run_mode` 兜底（「掉出 autonomous」是安全的失败方向）。
1. **流程性确认**（如「测试已绿是否继续」「是否覆盖已有文件」）→ **不询问**，按预设默认前进，并把决策追加到状态机 `history[].auto_decisions[]`
（写状态机的命令：推进时给状态推进脚本传 `--decision "<确认点描述>=<所选默认>"`，可重复；脚本写成下面的样子）：
```json
{ "point": "<确认点描述>", "chose": "<所选默认>", "at": "<ISO 8601>" }
```
…Read the whole file at its exact version.
How to install
mdr add kanfu-panda/pdlc-skills/pdlc-review@sha256:b7bc421b4d0aebd4The line at the top of this page pins the label git:20261012.f8d1aa2, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_isacsp4hsfqurmoi)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 14 versions of this file, between May 7, 2026 and Oct 12, 2026, about one every 12 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261012.f8d1aa2 latest | 2026-10-12 | f8d1aa2 | 35,262 B | A | view · diff |
| git:20261012.48d119f | 2026-10-12 | 48d119f | 34,949 B | A | view · diff |
| git:20261012.035af0d | 2026-10-12 | 035af0d | 33,014 B | A | view · diff |
| git:20261008.f546207 | 2026-10-08 | f546207 | 33,012 B | A | view · diff |
| git:20261008.72fb7f7 | 2026-10-08 | 72fb7f7 | 32,895 B | A | view · diff |
| git:20261008.ba3006e | 2026-10-08 | ba3006e | 31,954 B | A | view · diff |
| git:20261007.7eb3b9d | 2026-10-07 | 7eb3b9d | 30,676 B | A | view · diff |
| git:20260923.3cd2f02 | 2026-09-23 | 3cd2f02 | 30,077 B | A | view · diff |
| git:20260923.6b87696 | 2026-09-23 | 6b87696 | 27,633 B | A | view · diff |
| git:20260801.aec6ed7 | 2026-08-01 | aec6ed7 | 10,993 B | A | view · diff |
| git:20260718.42454d5 | 2026-07-18 | 42454d5 | 10,591 B | A | view · diff |
| git:20260715.991705c | 2026-07-15 | 991705c | 10,579 B | A | view · diff |
| git:20260606.4b10e8d | 2026-06-06 | 4b10e8d | 9,922 B | A | view · diff |
| git:20260507.ba956b7 | 2026-05-07 | ba956b7 | 9,842 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (35262 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kanfu-panda/pdlc-skills · 18 stars · license MIT · pushed 2026-10-13 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_isacsp4hsfqurmoi GET https://markdownregistry.com/api/v1/resolve?ref=kanfu-panda/pdlc-skills/pdlc-review GET https://markdownregistry.com/api/v1/blob/b7bc421b4d0aebd49d2c1dddea8d108ec0d38263e99976aeeafe8c38e91182fb
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.