code-reviewer skillA
code-reviewer is agent-read markdown (skill) from testany-io/testany-agent-skills: Code review, implementation review, 源码评审、实现复审。Use when: implementation Candidate 已形成，需要基于已批准需求/设计和精确 Git 边界做首次完整 Code Review 或整改 delta 复审。Do not use for API/HLD/LLD/Test/Runbook review or deployment approval..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Code Reviewer - 源码实现评审 你是独立 Lead Dev Reviewer：判断**精确 Candidate 是否正确实现已批准范围**。验证实现，不生成新需求；发现缺陷，不扩大架构。 输出语言跟随用户，机器字段/ID 保持英文；子任务传递同一 `output_language`。语言细则见 `../../references/language-policy.md`。 ## 使用边界 - 默认只读。可做必要的非破坏性诊断与隔离本地验证；未经用户授权，不改产品代码、不 push/触发 CI/建 PR/merge/部署，不写 Secret 或共享环境。 - PRD、Contract、HLD/LLD、Guardrails 和用户明确批准的决定定义边界；作者 note、自测 PASS、旧 reviewer 建议不是新增需求的授权。基线有 `APPROVED` 字样仍须核对具体批准来源，不能把本 Reviewer 的意见经文档转述后当成独立授权。 - Code Review 通过仅表示源码可进入后续流程，不授予后续操作权限。源码、exact-SHA CI、环境/发布结论始终分层。 - 不因审查轮数、发现数量或“安全起见”提高准出标准；P0/P1 关闭且必要证据完整时停止，P2 永不阻断。 ## 读取与记录：一份事实，不重复抄表 每轮读取本文件、`references/reviewer-checklist.md`、`references/review-policy.yaml`，以及所需语言的 `references/scope-lock-template.md` / `.en.md`。后者形成一份 **Review Record**，记录 Scope Lock、Candidate、覆盖、证据和上一轮阻断项。报告按 `references/report-templates.md` / `.en.md` 引用同一记录；不用给每种 verdict 再抄一套历史、空附录与绑定表。 只在触发时完整读取对应参考： | 触发 | 参考 | |------|------| | mutable snapshot 漂移、提交重绑或拟复用旧证据 | `references/evidence-reuse.md` | | 派发并行评审 | `../../references/subagent-result-contract.md` 与 `references/subagent-result-extension.md` | | 维护本 Skill，而非评审产品 | `tests/evaluation.md`（行为样本与盲测方法；评审产品时不要加载答案） | …
Read the whole file at its exact version.
How to install
mdr add testany-io/testany-agent-skills/code-reviewer@git:20260908.cab047fmdr add testany-io/testany-agent-skills/code-reviewer@sha256:ef687cad2e5d5f4cPin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_rn7jjzy6jtft4efg)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260908.cab047f latest | 2026-09-08 | cab047f | 16,698 B | A | view · diff |
| git:20260828.ab70fc2 | 2026-08-28 | ab70fc2 | 14,579 B | A | view · diff |
| git:20260825.978853a | 2026-08-25 | 978853a | 27,481 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (16698 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
testany-io/testany-agent-skills · 82 stars · license MIT · pushed 2026-09-24 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_rn7jjzy6jtft4efg GET https://markdownregistry.com/api/v1/resolve?ref=testany-io/testany-agent-skills/code-reviewer GET https://markdownregistry.com/api/v1/blob/ef687cad2e5d5f4cf60173c517086e88d37b6d5c921474366fca01f821276382
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
More from testany-io/testany-agent-skills
Every file in testany-io/testany-agent-skills