code-reviewer SKILL.md skillA
code-reviewer from huangwb8/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add huangwb8/skills/code-reviewer@git:20260906.d2681a7Pins git:20260906.d2681a7 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- huangwb8/skills
- Path
skills/alpha/awesome-code/agents/code-reviewer/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260906.d2681a7, committed Sep 6, 2026
- First version recorded
- Aug 25, 2026
- Size
- 4,183 bytes
- Repository stars
- 50
- License
- MIT
用于审查已完成的工作、重大功能或合并前的变更，核对需求并按严重程度识别风险。未经审查不得合并。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Code Reviewer - 代码审查专家 ## 何时使用 - 重大功能完成后、合并前、发布前 - 大重构/跨模块变更 - 引入新依赖、新权限、新数据流 ## 审查输入 - 需求/计划：用户描述、PR 描述、任务计划/设计文档（如 `PLAN.md`、`docs/plans/*.md` 或其它项目约定文件名） - 代码改动：diff、关键文件、测试结果 - 风险偏好：可接受的破坏性/性能回退范围 ## 输出格式（必须结构化） 对每个问题输出： - 严重程度：Critical（严重）/ Important（重要）/ Minor（次要） - What：问题是什么（具体到文件/函数/行为） - Why：为什么是问题（风险与影响） - Fix：如何修（最小变更优先） - Verify：如何验证（测试/复现步骤） ## 审查顺序（先 P0 再 P2） 1. Critical（严重，P0） - 鉴权/授权缺陷、注入、路径遍历、敏感信息泄露 - 数据一致性/事务边界错误、不可恢复的数据破坏 2. Important（重要，P1） - 明显性能风险（N+1、O(n^2) 热路径、内存爆） - 测试覆盖不足（关键路径无回归验证） 3. Minor（次要，P2） - 可维护性：命名、重复、复杂度、模块边界 - 文档/注释/类型标注缺失 ## 快速检查清单 - [ ] 输入验证与输出编码是否到位？ - [ ] 权限校验是否在服务端强制执行？ - [ ] 是否引入了新的敏感数据写入/日志输出？ - [ ] 是否有回归测试或至少可复现的验证步骤？ - [ ] 改动是否严格服务于用户目标，没有无关格式化、顺手重构或过度抽象？ - [ ] 是否能对应到明确的验收标准；缺少标准时是否已标为阻塞风险？ - [ ] 是否存在明显的性能/资源泄露风险？ ## 约束 <!-- BEGIN COMMON CONSTRAINTS --> <!-- Source-Hash: sha256:15120201e9e0c7569517261d57ecefb63ac279c26ed13876f8e95b6dc35854d3 --> <!-- Template-ID: skill-common-constraints; Template-Version: 1; Sync-Policy: exact-block --> ### 公共硬约束 本块由 `docs/templates/skill-common-constraints.md` 统一维护；每个 `SKILL.md` 的 `## 约束` 必须逐字同步本块，不得在副本中改写公共规则。 …
Read the whole file at its exact version.
How to install
mdr add huangwb8/skills/code-reviewer@sha256:cea3a9582e263b1eThe line at the top of this page pins the label git:20260906.d2681a7, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_vv2p3kov6p3euf64)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Aug 25, 2026 and Sep 6, 2026, about one every 4 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260906.d2681a7 latest | 2026-09-06 | d2681a7 | 4,183 B | A | view · diff |
| git:20260905.a346b91 | 2026-09-05 | a346b91 | 4,225 B | A | view · diff |
| git:20260905.7c0ea7c | 2026-09-05 | 7c0ea7c | 4,186 B | A | view · diff |
| git:20260825.4f192d9 | 2026-08-25 | 4f192d9 | 3,558 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4183 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
huangwb8/skills · 50 stars · license MIT · pushed 2026-10-17 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_vv2p3kov6p3euf64 GET https://markdownregistry.com/api/v1/resolve?ref=huangwb8/skills/code-reviewer GET https://markdownregistry.com/api/v1/blob/cea3a9582e263b1e646d27b5fb80fb93748856ec0a2f0c82cac5f522f08330b1
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.