review-lenses SKILL.md skillA
review-lenses from korallis/agent-stack is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add korallis/agent-stack/review-lenses@git:20261002.ff6a13fPins git:20261002.ff6a13f in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- korallis/agent-stack
- Path
skills/review-lenses/SKILL.md- Versions recorded
- 3
- Latest version
- git:20261002.ff6a13f, committed Oct 2, 2026
- First version recorded
- Sep 30, 2026
- Size
- 4,909 bytes
- Repository stars
- 35
- License
- Apache-2.0
Named lenses for reviewing a PR (correctness, security and data, maintainability, UX and journey, performance) and the way to sort findings into act on, consider, noted and dismissed. Use for every cross-family review; apply the lenses the diff touches.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Review lenses A review from the other model family is the merge gate's main input. It finds what the author's family misses because it looks from a different angle, not because it plays a role. Apply the lenses the diff touches, and say which ones you applied and which you skipped. ## Start with the intent Write one paragraph: what the PR is meant to do, from the slice SPEC, the PR description and the commits. If you can't tell, ask the author before reviewing. Every finding is judged against that intent. ## The lenses **Correctness.** Does the code do what the intent says? - Edge cases: empty input, nulls, boundaries, very large values, concurrent access. - Errors: caught, passed on, or silently swallowed? - Running twice, or after a crash halfway: is the result still right? - When you suspect a bug, trace the call chain that triggers it. Don't only say "this could be null". - Is it fixing the cause or hiding a symptom (a guard that masks a broken invariant, a retry that hides a broken contract, a cast that silences a type error)? **Security and data.** For each finding, trace the input path. - User input reaching SQL, a shell, `eval` or HTML without escaping. …
Read the whole file at its exact version.
How to install
mdr add korallis/agent-stack/review-lenses@sha256:c2487c851dd0efc8The line at the top of this page pins the label git:20261002.ff6a13f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_nplvy7erazp5diyi)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Sep 30, 2026 and Oct 2, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261002.ff6a13f latest | 2026-10-02 | ff6a13f | 4,909 B | A | view · diff |
| git:20260930.0299acd | 2026-09-30 | 0299acd | 4,314 B | A | view · diff |
| git:20260930.ce1c74b | 2026-09-30 | ce1c74b | 4,191 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4909 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
korallis/agent-stack · 35 stars · license Apache-2.0 · pushed 2026-10-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_nplvy7erazp5diyi GET https://markdownregistry.com/api/v1/resolve?ref=korallis/agent-stack/review-lenses GET https://markdownregistry.com/api/v1/blob/c2487c851dd0efc8bfdc5a4e8038d0025a5cc15c919810549758c84b54c7f66e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.