code-review SKILL.md skillA
code-review from izittmarvin/nova-agent is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add izittmarvin/nova-agent/code-review@git:20260808.5aa082bPins git:20260808.5aa082b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- izittmarvin/nova-agent
- Path
.nova/skills/code-review/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260808.5aa082b, committed Aug 8, 2026
- First version recorded
- Aug 8, 2026
- Size
- 3,692 bytes
- Repository stars
- 168
- License
- MIT
收集工作区未提交改动或最近一次提交的 git 变更面，做只读代码审查并给出带文件行号的问题清单。适用：审查改动、检查刚写的代码质量。不修改代码。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 代码审查
你正在执行 **code-review** 技能：对当前 git 变更面做只读审查，产出带证据的审查报告。
## 上下文
- 工作区：<%= workspacePath %>
- 用户请求：${arguments}
## 目标与完成标准
- **目标**：基于真实 diff 与相邻代码，审查正确性、边界、范围、架构、契约、安全与测试覆盖。
- **完成标准**：报告已写入工作区；消息流给出自然语言总结（结论、问题清单、优点、未能验证项）。除本技能约定的报告文件外，**不修改**业务代码、配置与其它文件。
## 阶段语义
### 1. 确定审查范围（git 事实）
先确认当前目录是 git 仓库。优先收集**工作区未提交改动**；工作区干净则回退到**最近一次提交**。
建议只读命令（按需组合）：
- `git rev-parse --is-inside-work-tree`
- `git status --porcelain`（识别未跟踪新文件）
- `git diff --name-only HEAD` / `git diff --stat HEAD` / `git diff --unified=3 HEAD`
- 工作区干净时：对 `HEAD~1 HEAD` 做同样的 diff
若不是 git 仓库，或既无未提交改动也无可比较提交，向用户说明原因并停止，不要臆造范围。
diff 过长时截取概览并标注已截断，再用只读工具补读完整文件。未跟踪文件不在 diff 中，须自行 `read`。
### 2. 只读审查
先读项目规则（`AGENTS.md` 及目录级规则）和被改动文件的相邻代码，再以真实代码为证据审查。
审查维度：
- **正确性**与失败路径
- **边界**与空值/并发等边缘情况
- **范围**是否超出用户意图
- **架构**与依赖方向
- **契约**与类型一致性
- **安全**（注入、密钥、权限）
- **测试**是否覆盖新行为
约束：
- 只读：不 `edit` / `write` 业务文件，不执行会改状态的命令，不向用户提问（范围不清时在报告的「未能验证」中说明）。
- 无法验证的点写入未能验证项，不要臆断。
- 每个问题尽量指出文件与行号，并给出可执行的修改建议。
需要并行加深某个子系统时，可同一轮发多个只读 `task`；是否并行由你判断。
### 3. 组织报告
报告须包含：
| 字段 | 含义 |
|------|------|
| `verdict` | `pass` / `conditional` / `block` |
| `summary` | 一句话总评 |
…Read the whole file at its exact version.
How to install
mdr add izittmarvin/nova-agent/code-review@sha256:7bbdaa6237af443cThe line at the top of this page pins the label git:20260808.5aa082b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_njiwcqbuwhlpwrfe)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, all committed on Aug 8, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260808.5aa082b latest | 2026-08-08 | 5aa082b | 3,692 B | A | view · diff |
| git:20260808.482e7e0 | 2026-08-08 | 482e7e0 | 3,621 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3692 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
izittmarvin/nova-agent · 168 stars · license MIT · pushed 2026-10-16 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_njiwcqbuwhlpwrfe GET https://markdownregistry.com/api/v1/resolve?ref=izittmarvin/nova-agent/code-review GET https://markdownregistry.com/api/v1/blob/7bbdaa6237af443c17905ee2bd4139581abe13e68e6ea2e79ccdb0f906d7d675
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from izittmarvin/nova-agent
Every file in izittmarvin/nova-agent