deep-dive-review SKILL.md skillA
deep-dive-review from huanmin123/ai-vibecode-superpower is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add huanmin123/ai-vibecode-superpower/deep-dive-review@git:20261104.d0edca9Pins git:20261104.d0edca9 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- huanmin123/ai-vibecode-superpower
- Path
shared/skills/deep-dive-review/SKILL.md- Versions recorded
- 3
- Latest version
- git:20261104.d0edca9, committed Nov 4, 2026
- First version recorded
- Oct 25, 2026
- Size
- 10,138 bytes
- Repository stars
- 39
- License
- Apache-2.0
对已交付或即将交付的需求、模块或变更集做多轮深挖质量审查：按覆盖矩阵开展假设穷举、对抗证伪、裁决过滤及证据链扩散，并按模式执行终态复核与收敛判据。显式发起即默认 report-only；只有用户显式确认 A 类即修权后才进入 fix 模式。用于用户显式要求的深挖、穷尽排查、上线前质量体检、隐藏缺陷挖掘；不用于常规开发过程闭环或单点 bug 修复。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 深挖复审 把"单轮 review 只见表象"升级为按约定覆盖矩阵迭代、可核验收敛的深挖环。四个核心机制： - **生成与验证分离**：攻击角色只产出假设（宁滥勿缺），验证角色只做证伪，不自我设限。 - **覆盖矩阵**：扫描范围展开成显式矩阵，"无问题"必须写成"已查 + 理由"的正面结论。 - **证伪导向**：验证者的任务是推翻问题报告，证伪失败才确认。 - **证据链扩散**：修复后沿耦合关系扩一跳，直到连续多轮零 B 类确认。 满足终止判据证明的是审查过程完成了约定覆盖，不证明对象不存在隐藏缺陷。 ## 交互与授权模型（核心） **默认 report-only**：用户显式发起深挖复审即可开始，产出台账、问题记录与终报；A/B/C 只作为建议分级。除约定的审查产物外，不修改目标项目文件，包括源码、配置、项目测试和文档；复现也不得写入这些对象。只有用户显式确认"可以修复"并接受 A 类即修语义后，才进入 fix 模式；授权模式记入台账。 **fix 模式**：一次授权包含三级修复语义；循环自主迭代，B 类须过目： - **A 类·自主修复**：修复后行为与目标项目契约/文档承诺一致，或对合法用户在合法输入下完全无感知。含：内部正确性（崩溃、竞态、泄漏、悬挂、资源回收）、防御收紧（只影响非法/恶意请求的响应修正，如 500→400、注入拦截、钳制、转义）、修复自身回归、文档失同步、测试与注释、结果等价的性能修复。即修即登记台账，零交互，不计入收敛计数。 - **B 类·过目后修**：合法用户可观察的行为变化且无契约依据——新增校验挡住以前成功的请求、成功响应形状/语义变化、缓存与可见性语义、数据保留策略、评分/算法输入语义。每轮收口随轮报呈报，批后继续；计入收敛计数。 - **C 类·裁决清单**：功能缺口、产品取舍、容量决策、破坏性形状统一——不是缺陷，不进修复流、不计入收敛计数；台账积累，收口时一次性呈报。 判据以契约为基准，不以当前有缺陷的实现为基准：把行为拉回契约已承诺的语义属 A 类（回归修复），无契约依据的新语义/新约束才属 B 类。 report-only 不执行下面的修复与落点复核步骤；收敛判据见第 6 步。 ## 边界 | 任务形态 | 走向 | | --- | --- | | 复杂开发的过程闭环（边做边审） | orchestrate-model-workflow | | 交付后/上线前对锚定对象做穷尽深挖 | 本 skill | | 单点 bug、边界清晰的明确改动 | 直接完成，不进深挖环 | ## 准入前提（缺一不开工） 1. 用户显式发起即采用 report-only；只有用户明确同意 A 类即修权才进入 fix 模式。B 类过目门与 C 类清单语义在发起时向用户说明。 …
Read the whole file at its exact version.
How to install
mdr add huanmin123/ai-vibecode-superpower/deep-dive-review@sha256:da5eeed393ecf96dThe line at the top of this page pins the label git:20261104.d0edca9, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_qk6aq4ipjpkucafl)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Oct 25, 2026 and Nov 4, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261104.d0edca9 latest | 2026-11-04 | d0edca9 | 10,138 B | A | view · diff |
| git:20261104.d6f23e3 | 2026-11-04 | d6f23e3 | 9,145 B | A | view · diff |
| git:20261025.e8b21c8 | 2026-10-25 | e8b21c8 | 7,483 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10138 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
huanmin123/ai-vibecode-superpower · 39 stars · license Apache-2.0 · pushed 2026-11-06 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_qk6aq4ipjpkucafl GET https://markdownregistry.com/api/v1/resolve?ref=huanmin123/ai-vibecode-superpower/deep-dive-review GET https://markdownregistry.com/api/v1/blob/da5eeed393ecf96ddac8369a53cf9d7ea4f7717ddd305ae66f586217c184e83e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.