review-gate SKILL.md skillA
review-gate from majiayu000/spellbook is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add majiayu000/spellbook/review-gate@git:20260705.94ad48dPins git:20260705.94ad48d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- majiayu000/spellbook
- Path
skills/review-gate/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260705.94ad48d, committed Jul 5, 2026
- Size
- 4,403 bytes
- Repository stars
- 290
- License
- MIT
Use before an agent-produced diff is committed, pushed, opened as a PR, merged, landed, or applied to user files when explicit implementation approval is missing. Trigger for review gate, review pack, approve before landing, diff first then land, human approval, merge gate, commit gate, push gate, or PR readiness. Produces a concise review pack, records risks and verification, and blocks landing until a human explicitly approves or approves with required fixes.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Review Gate Use this skill as the last-mile safety checkpoint for agent-generated changes. It complements PR review tools; it does not replace code review, CI, or human approval. Use `assets/review-pack-template.md` when the user needs a reusable review pack shape. ## When To Run Run before any of these actions when an agent-generated diff is involved: - commit - push - open or update a PR - merge or land - apply a generated patch to user files when the user has not already approved that exact implementation path Read-only review, planning, issue triage, and local exploration do not require this gate unless the next step would land or publish changes. ## Operating Contract - Direct actions: inspect diffs, collect verification evidence, and draft the review pack. - Escalate before: commit, push, PR creation, merge, branch deletion, or applying a generated patch when the user has not approved that exact action. - Evidence-backed pushback: block landing when verification is stale, sensitive surfaces lack review, or approval is ambiguous. - Feedback loop: convert repeated review findings into new checklist items, verification commands, or Review Pack risk prompts. …
Read the whole file at its exact version.
How to install
mdr add majiayu000/spellbook/review-gate@sha256:06e37f9ecb981b6cThe line at the top of this page pins the label git:20260705.94ad48d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_v42rch6iajzzufgk)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jul 5, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4403 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
majiayu000/spellbook · 290 stars · license MIT · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_v42rch6iajzzufgk GET https://markdownregistry.com/api/v1/resolve?ref=majiayu000/spellbook/review-gate GET https://markdownregistry.com/api/v1/blob/06e37f9ecb981b6cb2437fa11d7c6315320b8c48a8053fb46d57505112f9da9c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from majiayu000/spellbook
Every file in majiayu000/spellbook