review SKILL.md skillA
review from auyecoding/radish-plugins is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add auyecoding/radish-plugins/review@git:20261009.ce7234ePins git:20261009.ce7234e in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- auyecoding/radish-plugins
- Path
plugins/waypoint/skills/review/SKILL.md- Versions recorded
- 3
- Latest version
- git:20261009.ce7234e, committed Oct 9, 2026
- First version recorded
- Oct 9, 2026
- Size
- 6,499 bytes
- Repository stars
- 4
- License
- MIT
Describe the problem just hit while using a WayPoint skill (commit-message, repo-init, project-navigator) so the user can verify it, record it as a defect, then review all captured defects and decide whether to iterate the skills. User-invoked only; does not auto-trigger and never changes skills on its own.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 技能自迭代复查 用户遇到问题时调用本技能: 先把本会话里遇到的问题按事实说清楚, 供用户核实并记成缺陷; 再汇总全部缺陷记录, 把反复出现的归因后交用户决定是否迭代技能. 本技能只呈现事实与建议, **不自行改任何技能** — 改技能必须由用户批准. 缺陷记录有两个来源: 用户纠正某个 waypoint 简单技能 (commit-message, repo-init) 的结果时, 插件 hook 提示代理当场记一条; 用户调用本技能时由第 1, 2 步补记. 两者都只记事实 (看到什么, 依据哪条规则或要点, 做了什么, 结果如何). 代理不下 "是规则错还是自己错" 的结论 — 那不可靠 (代理对自己理由的陈述常不忠实, 定位决定性错误也很难), 归因留到第 4 步由人按固定分类表做. project-navigator 有自己的编排流程与记录机制, 插件 hook 不在它的编排会话里弹提示; 用户发现它的技能缺陷 (不是某张工单的问题, 而是技能本身的毛病) 时调用本技能, 各步同样适用 (`"skill":"project-navigator"`). 在它的编排会话里调用时: - 回复用 "自由答复" 类型 (`reply freeform` 取骨架), 第 1 步的描述与第 3 步的转述写在 "答复内容" 里. - 守卫为本技能放行两件事: 写 `.waypoint/defects/` 下的 JSON 文件, 以及运行第 3 步的汇总脚本 (单独一条命令, 不带管道与重定向). 其它限制不变. - 这两件事仍被拒绝, 说明项目里的 project-navigator 脚本早于 0.12.0: 不要换写法重试, 保留回复里的描述, 请用户照 `status` 下一动作里的 init 命令升级后再调用本技能. ## 步骤 1. **说清本会话遇到的问题**: 回顾本会话中使用 waypoint 技能 (commit-message, repo-init, project-navigator) 的过程, 找出出问题的地方: 用户纠正过的, 结果被证明不对的, 反复尝试仍卡住的, 照规则做却行不通的. 用户调用时附带了说明的, 以说明所指的那件事为准. 对每个问题, 在回复里按下面的格式写出来给用户核实: ``` 问题 <序号>: <一句话概括> - 技能与任务: <哪个技能, 当时在做什么> - 看到: <当时的输入, 现象或命令输出> - 依据: <照的是技能里哪条规则或哪一步, 引原文; 没有对应规则时写 "无对应规则"> - 做了: <实际做了什么> - 结果: <得到什么, 与用户的期望或纠正差在哪> ``` …
Read the whole file at its exact version.
How to install
mdr add auyecoding/radish-plugins/review@sha256:ed3d7a5e549cb811The line at the top of this page pins the label git:20261009.ce7234e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_w4kphkaqirgvjw5s)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, all committed on Oct 9, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261009.ce7234e latest | 2026-10-09 | ce7234e | 6,499 B | A | view · diff |
| git:20261009.affea9a | 2026-10-09 | affea9a | 6,037 B | A | view · diff |
| git:20261009.9da739b | 2026-10-09 | 9da739b | 3,203 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6499 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
auyecoding/radish-plugins · 4 stars · license MIT · pushed 2026-10-14 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_w4kphkaqirgvjw5s GET https://markdownregistry.com/api/v1/resolve?ref=auyecoding/radish-plugins/review GET https://markdownregistry.com/api/v1/blob/ed3d7a5e549cb8111d2ea5c41d6884992388868997ea702d44d03f26ac6e6fc2
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from auyecoding/radish-plugins
Every file in auyecoding/radish-plugins