review-code SKILL.md skillA
review-code from mgiovani/cc-arsenal is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add mgiovani/cc-arsenal/review-code@v2.0.0Pins v2.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- mgiovani/cc-arsenal
- Path
skills/review-code/SKILL.md- Versions recorded
- 9
- Latest version
- v2.0.0, committed Oct 5, 2026
- First version recorded
- Feb 6, 2026
- Size
- 11,078 bytes
- Repository stars
- 8
- License
- MIT
Runs one adaptive multi-agent code review of a PR, commit, or the whole codebase. Always covers six core dimensions (correctness, performance, code style, test coverage, error handling, simplicity/over-engineering) plus architecture and design patterns, then adds security, dependency, deep-performance, and UI/motion lanes when the change touches those areas. Critical and Major findings are adversarially verified before the severity-ranked report with file:line findings and fixes goes out in…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Code Review One review, adaptive lanes. The six core dimensions and the architecture lane always run. Security, deps, deep-performance and design/motion lanes join when the diff touches their area. Critical and Major findings are then attacked by a verifier before they reach the report. Analysis only. Never edit code, commit, apply fixes, or run anything that mutates the repo. The report goes to chat. Run `gh` write commands (reviews, comments) only when the user explicitly asks to post. ## Core rules - Every finding cites a `file:line` you read, pointing at the offending statement itself, not the block around it. No hypothetical issues, no estimated counts. - Review the diff, not the uncommitted working tree. Findings on changed lines are in-diff; findings on untouched lines of touched files are `preexisting`. - Project rules (AGENTS.md, CLAUDE.md, `.claude/skills/*`) are the style standard. A violation is a finding. Personal preference is not. - User context such as "another session is fixing X" is information, not an exclusion, unless the user says to exclude it. - Strict by default: report every smell and rule violation, Nit included. Nothing is silently passed. …
Read the whole file at its exact version.
How to install
mdr add mgiovani/cc-arsenal/review-code@sha256:b83f37282783cc71The line at the top of this page pins the label v2.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ub3ar43vcgz6vqa7)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 9 versions of this file, between Feb 6, 2026 and Oct 5, 2026, about one every 30 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v2.0.0 latest | 2026-10-05 | b620662 | 11,078 B | A | view · diff |
| v1.1.0 | 2026-09-25 | ca015cc | 9,561 B | A | view · diff |
| v1.1.0 | 2026-09-24 | a80f9cd | 9,323 B | A | view · diff |
| v1.1.0 | 2026-09-16 | 0d6e629 | 9,414 B | A | view · diff |
| v1.1.0 | 2026-07-27 | fa2e9cf | 9,311 B | A | view · diff |
| v1.1.0 | 2026-07-19 | 4ee8666 | 9,343 B | A | view · diff |
| v1.0.0 | 2026-07-02 | 8f6da63 | 14,844 B | A | view · diff |
| v1.0.0 | 2026-02-13 | 4d6a175 | 9,876 B | A | view · diff |
| git:20260206.c8d6258 | 2026-02-06 | c8d6258 | 10,863 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11078 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
mgiovani/cc-arsenal · 8 stars · license MIT · pushed 2026-10-28 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ub3ar43vcgz6vqa7 GET https://markdownregistry.com/api/v1/resolve?ref=mgiovani/cc-arsenal/review-code GET https://markdownregistry.com/api/v1/blob/b83f37282783cc71bdaaf39fbd7e683f75ccdc32c04f9152b7b356c04299a7a0
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from mgiovani/cc-arsenal
Every file in mgiovani/cc-arsenal