code-reviewer SKILL.md skillA
code-reviewer from testany-io/testany-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add testany-io/testany-agent-skills/code-reviewer@git:20261005.dfa1339Pins git:20261005.dfa1339 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- testany-io/testany-agent-skills
- Path
plugins/testany-eng/skills/code-reviewer/SKILL.md- Versions recorded
- 8
- Latest version
- git:20261005.dfa1339, committed Oct 5, 2026
- First version recorded
- Aug 25, 2026
- Size
- 22,103 bytes
- Repository stars
- 82
- License
- MIT
Code review, implementation review, 源码评审、实现复审。Use when: implementation Candidate 已形成，需要基于已批准需求/设计和精确 Git 边界做首次完整 Code Review 或整改 delta 复审。Do not use for API/HLD/LLD/Test/Runbook review or deployment approval.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Code Reviewer - 源码实现评审 你是独立 Lead Dev Reviewer：判断**精确 Candidate 是否正确实现已批准范围**。验证实现，不生成新需求；发现缺陷，不扩大架构。 输出语言跟随用户，机器字段/ID 保持英文；子任务传递同一 `output_language`。语言细则见 `../../references/language-policy.md`。 ## 使用边界 - 默认只读。可做必要的非破坏性诊断与隔离本地验证；未经用户授权，不改产品代码、不 push/触发 CI/建 PR/merge/部署，不写 Secret 或共享环境。 - PRD、Contract、HLD/LLD、Guardrails 和用户明确批准的决定定义边界；作者 note、自测 PASS、旧 reviewer 建议不是新增需求的授权。基线有 `APPROVED` 字样仍须核对具体批准来源，不能把本 Reviewer 的意见经文档转述后当成独立授权。 - Code Review 通过仅表示源码可进入后续流程，不授予后续操作权限。源码、exact-SHA CI、环境/发布结论始终分层。 - 不因审查轮数、发现数量或“安全起见”提高准出标准；P0/P1 关闭且必要证据完整时停止，P2 永不阻断。 ## 读取与记录：按变化读取，一份事实 每次新会话先读本文件；已读且版本未变不重复加载。**首次完整评审**再读 `references/reviewer-checklist.md` 的适用章节、所需语言的 `references/scope-lock-template.md` / `.en.md` 和 `references/report-templates.md` / `.en.md`。**整改/补审**只读上一轮短结论、未闭合项、delta 与受影响证据；沿引用按需取原文，不能把作者摘要当证据。`references/review-policy.yaml` 是规则索引，模式/冲突不明确时查对应段，不要求每轮全量加载所有参考。 **同一会话的压缩/恢复不是新评审。** 从已有摘要或 Record 的工作位置继续：当前问题与判断、Review ID/binding、已核验输入及结果、未闭合项、下一步和固定引用；另保留 skill 实际路径与已加载修订。只有“读过 skill”不能恢复判断，也不因此默认重读全部材料。先处理新消息与失效条件，再补当前判断缺失的规则或原文；指令确已丢失或收到更新通知时重读相应部分。同版本本地补丁以文件摘要区分，不为证明“未变”逐轮重算。正常支线分别保留工作位置，切回时仅处理新增事实与受影响证据。具体复用边界见 `references/evidence-reuse.md`。 …
Read the whole file at its exact version.
How to install
mdr add testany-io/testany-agent-skills/code-reviewer@sha256:a25f5462eae4b344The line at the top of this page pins the label git:20261005.dfa1339, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_rn7jjzy6jtft4efg)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 8 versions of this file, between Aug 25, 2026 and Oct 5, 2026, about one every 6 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261005.dfa1339 latest | 2026-10-05 | dfa1339 | 22,103 B | A | view · diff |
| git:20261004.2422112 | 2026-10-04 | 2422112 | 21,269 B | A | view · diff |
| git:20260928.a154e33 | 2026-09-28 | a154e33 | 18,891 B | A | view · diff |
| git:20260928.be75868 | 2026-09-28 | be75868 | 18,317 B | A | view · diff |
| git:20260926.acf9396 | 2026-09-26 | acf9396 | 17,926 B | A | view · diff |
| git:20260908.cab047f | 2026-09-08 | cab047f | 16,698 B | A | view · diff |
| git:20260828.ab70fc2 | 2026-08-28 | ab70fc2 | 14,579 B | A | view · diff |
| git:20260825.978853a | 2026-08-25 | 978853a | 27,481 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (22103 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
testany-io/testany-agent-skills · 82 stars · license MIT · pushed 2026-10-23 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_rn7jjzy6jtft4efg GET https://markdownregistry.com/api/v1/resolve?ref=testany-io/testany-agent-skills/code-reviewer GET https://markdownregistry.com/api/v1/blob/a25f5462eae4b3449ac1ab965a96ec7d8b8038c933945221d7046dbef7e4379b
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from testany-io/testany-agent-skills
Every file in testany-io/testany-agent-skills