Review code changes for correctness, security, performance, and maintainability before merging. Use when reviewing a PR/diff or auditing a file for quality.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Code Review
Review changes against a consistent checklist. Be specific and kind; cite file:line.
## Procedure
1. **Understand intent.** Read the PR description / linked issue first. What is this change trying to do?
2. **Read the diff in full** (`git diff main...HEAD`). Then read the surrounding context, not just changed lines.
3. **Check correctness first:** does it do what it claims? Edge cases? Error handling? Off-by-ones? Null/empty inputs?
4. **Check security:** untrusted input handling, injection (SQL/HTML/cmd), authz, secrets in code/logs, path traversal, unsafe deserialization.
5. **Check performance:** N+1 queries, accidental O(n²), unbounded loops, missing pagination, large allocations in hot paths.
6. **Check maintainability:** naming, duplication (DRY), dead code, overly long functions, missing tests, misleading comments.
7. **Verify tests** actually cover the new behavior and aren't just happy-path.
## Severity levels
- **Blocking** (must fix): correctness bugs, security holes, data loss, missing tests for risky logic.
- **Important** (should fix): poor error handling, perf issues, unclear naming.
- **Nit** (optional): style, minor refactors.
…
The line at the top of this page pins the label git:20260624.52cbbd6, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (1888 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag
Source
GitHub
metaspartan/cybara · 32 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_k7mpdhwrdqqr2yrg
GET https://markdownregistry.com/api/v1/resolve?ref=metaspartan/cybara/code-review
GET https://markdownregistry.com/api/v1/blob/e1f42e2baaad3eec4347298506aa7e7a0fa1673dbebdfeab41fd79c1f4e1a887
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
metaspartan/cybara · plugins/blender-workflows/skills/blender-headless/SKILL.md · Build, render, and visually verify 3D models with Blender's Python API in headless mode, using the image tool to…
metaspartan/cybara · plugins/browser-quality/skills/browser-qa/SKILL.md · Validate web applications through the embedded browser with responsive, interaction, console, and screenshot checks.
metaspartan/cybara · plugins/data-workflows/skills/database-operations/SKILL.md · Inspect schemas, debug queries, plan migrations, and validate data changes across common relational databases.
metaspartan/cybara · plugins/game-development/skills/bevy/SKILL.md · Build, test, debug, and optimize Rust games and tools using the Bevy engine, ECS scheduling, assets, rendering, and…
metaspartan/cybara · plugins/game-development/skills/game-development/SKILL.md · Route and execute game project work across Unreal Engine, Unity, Godot, Bevy, browser engines, assets, performance…
metaspartan/cybara · plugins/game-development/skills/game-networking/SKILL.md · Design, implement, test, secure, and profile multiplayer game networking across engines, including authority…
metaspartan/cybara · plugins/game-development/skills/game-playtesting/SKILL.md · Test a game end to end like a player across boot, controls, gameplay loops, UI, save state, failure recovery…
kyegomez/swarms · examples/single_agent/capabilities/skills/multiple_skill_dirs/team_skills/code-review/SKILL.md · Review Python code for bugs, missing tests and security issues using the team's shared standards
basicmachines-co/basic-memory · .agents/skills/code-review/SKILL.md · Use when reviewing Basic Machines code for house style, architecture risk, pre-merge hardening, or whether a change…
nteract/semiotic · .github/skills/code-review/SKILL.md · Review Semiotic pull requests for behavioral bugs, regressions, contract drift, and missing evidence. Use for GitHub…
cbrock84/headcount · plugins/technology/skills/code-review/SKILL.md · Conducts and responds to code review — reviewing a change for correctness, design, and risk, and evaluating review…
