Systematic code review for correctness, security, and growth — not just style enforcement.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Code Review Skill
> Good reviews catch bugs. Great reviews teach the author something.
## Review Priority (What Matters Most)
1. **Correctness** — Does it do what it's supposed to?
2. **Security** — Can it be exploited?
3. **Maintainability** — Will the next person understand this?
4. **Performance** — Will it scale?
5. **Style** — Is it consistent? (ideally enforced by linters, not humans)
## 3-Pass Review
| Pass | Focus | What You're Looking For | Time |
| ---- | ----- | ----------------------- | ---- |
| 1. Orientation | Big picture | Does the approach make sense? Is the scope right? Over-engineered? | 2-3 min |
| 2. Logic | Deep read | Edge cases, null handling, error paths, concurrency, off-by-one | 10-15 min |
| 3. Polish | Surface | Naming, duplication, test coverage, docs | 3-5 min |
**Pass 1 shortcut**: Read the PR description and test names first. They reveal intent faster than code.
## Comment Prefixes
| Prefix | Meaning | Author Response |
| ------ | ------- | --------------- |
| `[blocking]` | Must fix before merge | Fix it |
| `[suggestion]` | Better approach exists | Consider it, explain if declining |
…
The line at the top of this page pins the label git:20260728.80a7ab6, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_vnezybi5onim7hee
GET https://markdownregistry.com/api/v1/resolve?ref=fabioc-aloha/alex_skill_mall/code-review
GET https://markdownregistry.com/api/v1/blob/615ec9874c58391f7fc9510106fd267dee7c60c5d6326acda11bc3d9b84135d1
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
fabioc-aloha/alex_skill_mall · .github/skills/source-inventory/SKILL.md · Maintain the source registry in sources/supported-stores.json — add a new third-party plugin store, retire one, refresh…
fabioc-aloha/alex_skill_mall · .github/skills/staleness-discipline/SKILL.md · Detect, classify, and prune stale source stores in the Mall — define what stale means and how to remove gracefully…
fabioc-aloha/alex_skill_mall · .github/skills/store-evaluation/SKILL.md · Evaluate a proposed store for inclusion in Alex_ACT_Plugin_Mall using a quality scorecard
fabioc-aloha/alex_skill_mall · plugins/3d-graphics/spline-3d-integration/skills/spline-3d-integration/SKILL.md · Use when adding interactive 3D scenes from Spline.design to web projects, including React embedding and runtime control…
fabioc-aloha/alex_skill_mall · plugins/academic-research/academic-paper-drafting/skills/academic-paper-drafting/SKILL.md · End-to-end academic paper drafting for CHI, HBR, journals, and conferences with venue-specific templates, drafting…
fabioc-aloha/alex_skill_mall · plugins/academic-research/academic-research/skills/academic-research/SKILL.md · Research project scaffolding, thesis/dissertation writing, literature reviews, publication workflows, and the AI…
agno-agi/agno · cookbook/02_agents/16_skills/sample_skills/code-review/SKILL.md · Code review assistance with linting, style checking, and best practices
kyegomez/swarms · examples/single_agent/capabilities/skills/multiple_skill_dirs/team_skills/code-review/SKILL.md · Review Python code for bugs, missing tests and security issues using the team's shared standards
basicmachines-co/basic-memory · .agents/skills/code-review/SKILL.md · Use when reviewing Basic Machines code for house style, architecture risk, pre-merge hardening, or whether a change…
nteract/semiotic · .github/skills/code-review/SKILL.md · Review Semiotic pull requests for behavioral bugs, regressions, contract drift, and missing evidence. Use for GitHub…