impact-review SKILL.md skillA
impact-review from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add devcodex-labs/devcodex/impact-review@git:20260908.6caf1bfPins git:20260908.6caf1bf in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- devcodex-labs/devcodex
- Path
content/skills/impact-review/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260908.6caf1bf, committed Sep 8, 2026
- First version recorded
- Jul 30, 2026
- Size
- 2,259 bytes
- Repository stars
- 432
- License
- AGPL-3.0
影响评估规范 — 代码变更六维影响框架 + 回归风险评级.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Impact Review Skill ## 职责 在 CP2（方案确认）后、EXEC（编码执行）前，评估技术方案的架构影响范围，输出影响评估报告。CP2 尚未确认时可写入技术方案 §11；确认后保持已冻结方案字节与摘要，将评估追加到独立 `03-方案复审-PR1.md`，引用对应 CP2 的 artifactPath、version、sha256。评估若改变已确认设计，走既有 CP2 候选版本与演进确认流程；不得为了补充评估而直接改写冻结产物，也不得把摘要变化伪装成原确认。 ## 触发时机 | 工作流 | 触发条件 | |--------|----------| | dev | 仅当 dev-plan-review PR-5② 标记"跨模块架构依赖变更"时 | | fix | 仅当修复方案涉及跨模块架构依赖变更（PR-5②）时 | > 🔴 PR-5① 对外接口变更 → EXEC 后走 `api-verification`，**不进 impact-review**。 > 🔴 PR-5③ 数据库 Schema 变更 → 走 `dev-database` Skill，**不进 impact-review**。 **豁免**：`dev-docs`、`dev-plan-review`、`analyze`、`audit`、`chat`。analyze 可在只读报告内讨论影响，但不得进入 CP2 后/EXEC 前的本 Skill 状态机。 ## 六维评估框架 | 维度 | 内容 | |------|------| | 1 受影响功能 | 本次变更直接修改的功能列表 | | 2 直接依赖 | 直接调用/引用被修改模块的代码 | | 3 间接影响路径 | 通过依赖链间接受影响的模块 | | 4 用户可见行为变化 | 用户/调用方感知到的行为差异 | | 5 回归风险评级 | 🔴 高 / 🟡 中 / 💡 低（基于影响范围） | | 6 验证策略 | 需要额外验证的测试点和验证方法 | ## 输出格式 ```markdown ## 影响评估报告 **变更摘要**：[一句话描述本次变更] **回归风险**：🔴 高 / 🟡 中 / 💡 低 | 维度 | 内容 | |------|------| | 受影响功能 | ... | | 直接依赖 | ... | | 间接影响 | ... | | 用户可见变化 | ... | | 验证策略 | ... | ``` ## 关键规则 - 🔴 高风险变更**必须**补充回归测试用例 - 影响范围 >3 个模块时，建议分批发布 - Breaking Changes 必须在评估中标注并提供迁移指南
Read the whole file at its exact version.
How to install
mdr add devcodex-labs/devcodex/impact-review@sha256:27dfe84132d3f359The line at the top of this page pins the label git:20260908.6caf1bf, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_mwcpl6ylwy26inl7)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Jul 30, 2026 and Sep 8, 2026, about one every 40 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260908.6caf1bf latest | 2026-09-08 | 6caf1bf | 2,259 B | A | view · diff |
| git:20260730.6ee304a | 2026-07-30 | 6ee304a | 1,912 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2259 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_mwcpl6ylwy26inl7 GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/impact-review GET https://markdownregistry.com/api/v1/blob/27dfe84132d3f359890c25bebd2ae90aeca73d65b94d9477183369fc143fa53e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.