unknown-coverage-review SKILL.md skillA
unknown-coverage-review from s977043/river-review is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add s977043/river-review/unknown-coverage-review@v0.2.0Pins v0.2.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- s977043/river-review
- Path
skills/agent-skills/unknown-coverage-review/SKILL.md- Versions recorded
- 6
- Latest version
- v0.2.0, committed Sep 17, 2026
- First version recorded
- Jul 11, 2026
- Size
- 15,539 bytes
- Repository stars
- 7
- License
- MIT
完成した差分・PR・検証証拠に残る Unknown（未確認の前提・調査されていない影響・ 不足している証拠）を横断合成する evidence-sufficiency のメタ観点。個別 defect の 検出は既存 skill へ委譲し、本 skill は「そのリスク種別を調査した証拠が残っているか」 の meta 評価のみを行う。通常は finding verification 後の generic 合成ステップとして、 明示的 Security Audit では SecurityAuditCoverage 専用 profile として report-only で実行する。 残存 Unknown は既存 Unknown Coverage 構造へ出力し、新しい語彙・schema は作らない。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Unknown Coverage Review（残存 Unknown のメタ観点） > **由来 / Inspired by**: Thariq「[A Field Guide to Finding Your Unknowns](https://claude.com/blog/a-field-guide-to-claude-fable-finding-your-unknowns)」（The map is not the territory: Plan やプロンプトは現実のコードベースを圧縮した地図であり、地図と土地の差分に Unknown が潜む）と Matt Pocock「[`/grill-me`](https://www.aihero.dev/skills-grill-me)」（実装前に質問を重ね共有理解を作る）から着想した概念の再実装。原著者を名指しする nominative fair use に留め、endorsement は主張しない。 通常のレビューは「壊れている箇所（defect）」を指す。 本観点は **「そのリスク種別を調査した証拠が残っているか（evidence-sufficiency）」** を横断合成する。問いが直交するため、defect 検出とは混載しない。 ## 背景 / Background AI coding agent の実行能力が上がるほど、見逃しは単純なコード品質から **要件・暗黙知・影響範囲・運用条件・移行条件などの「未確認の未知（Unknown）」** へ移る。 チェックリストを満たしても、レビュー対象外の前提や未確認領域が残れば誤った判断につながる。 本観点は大量の質問を生成しない。利用 profile が許可した evidence を調査し、以下を構造化して出力する。 1. 何が未確認か 2. なぜ危険か 3. どの証拠が不足しているか 4. 何を確認すれば解消できるか 5. caller が判断するためにどの residual risk を残すべきか ## Execution profiles Select exactly one profile before reviewing. ### `generic` Default profile for the existing diff / PR review flow. It preserves the current post-finding-verification pre-execution gate, diff requirement, delegation rules, and verdict mapping. ### `security-audit` …
Read the whole file at its exact version.
How to install
mdr add s977043/river-review/unknown-coverage-review@sha256:5c2a335f8b09ddf5The line at the top of this page pins the label v0.2.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_sflslj5eqmbjl724)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Jul 11, 2026 and Sep 17, 2026, about one every 13 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v0.2.0 latest | 2026-09-17 | 0d0b5d2 | 15,539 B | A | view · diff |
| v0.1.0 | 2026-07-14 | 8c80372 | 13,089 B | A | view · diff |
| v0.1.0 | 2026-07-12 | 5402302 | 12,806 B | A | view · diff |
| v0.1.0 | 2026-07-12 | 12aec37 | 12,732 B | A | view · diff |
| v0.1.0 | 2026-07-11 | 5a180c2 | 11,865 B | A | view · diff |
| v0.1.0 | 2026-07-11 | 5de796e | 11,428 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (15539 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
s977043/river-review · 7 stars · license MIT · pushed 2026-11-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_sflslj5eqmbjl724 GET https://markdownregistry.com/api/v1/resolve?ref=s977043/river-review/unknown-coverage-review GET https://markdownregistry.com/api/v1/blob/5c2a335f8b09ddf57defc39d36458eee9b0c8369457792c21529cf61d5a03278
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from s977043/river-review
Every file in s977043/river-review