Pull request review checklist for finfocus. Lists the invariants a reviewer should check that linters and tests do not catch, such as secret redaction, stdout discipline, cache-key completeness, cost-math conventions, plugin module boundaries, MCP exposure, and test isolation.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# FinFocus Code Review
Use this skill when reviewing a pull request in this repository. General
conventions (build commands, testify, `RunE`, error wrapping, import order) are
in `.github/copilot-instructions.md` and `.github/instructions/`. This file
lists the project invariants that break silently, so a review should check
them explicitly.
Do not rely on a tool or Go version quoted in any prose file, including this
one. `mise.toml` pins every tool version (Go, golangci-lint, markdownlint,
actionlint, shellcheck) and `go.mod` holds the Go and finfocus-spec versions.
Read them from there, and flag a PR that changes a pin in one place but not
the files that `mise.toml` says must change with it.
## Review Order and Severity
Review in this order, and label each comment with its severity:
1. **CRITICAL** (block merge): secret or credential exposure, wrong cost
output, corrupted output on stdout, data loss in the cache or history
databases, broken plugin protocol compatibility.
2. **IMPORTANT** (needs discussion): missing tests for a new path, a broken
project invariant from this file, a mismatch with the linked issue or spec.
…
The line at the top of this page pins the label git:20261019.aa6da86, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_x6tpcrqcnlw5jy4j
GET https://markdownregistry.com/api/v1/resolve?ref=rshade/finfocus/code-review
GET https://markdownregistry.com/api/v1/blob/5b5c2c9c6ba658068ed977b6687c2918f7704db98a39ee7129ac617df1458760
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
rshade/finfocus · .agents/skills/pick-issue/SKILL.md · Choose and claim one FinFocus roadmap issue, implement it through the repository workflow, prepare a pull request, and…
rshade/finfocus · .agents/skills/promote-issue/SKILL.md · Triage the finfocus roadmap backlog and promote the next issue(s) to roadmap/current. Use when the user asks "what…
rshade/finfocus · .agents/skills/speckit-analyze/SKILL.md · Perform a non-destructive cross-artifact consistency and quality analysis across spec.md, plan.md, and tasks.md after…
rshade/finfocus · .agents/skills/speckit-clarify/SKILL.md · Identify underspecified areas in the current feature spec by asking up to 5 highly targeted clarification questions and…
rshade/finfocus · .agents/skills/speckit-constitution/SKILL.md · Create or update the project constitution from interactive or provided principle inputs, ensuring all dependent…
rshade/finfocus · .agents/skills/speckit-converge/SKILL.md · Assess the current codebase against the feature's spec, plan, and tasks, then append any remaining unbuilt work as new…
rshade/finfocus · .agents/skills/speckit-implement/SKILL.md · Execute the implementation plan by processing and executing all tasks defined in tasks.md
rshade/finfocus · .agents/skills/speckit-plan/SKILL.md · Execute the implementation planning workflow using the plan template to generate design artifacts.
rshade/finfocus · .agents/skills/speckit-tasks/SKILL.md · Generate an actionable, dependency-ordered tasks.md for the feature based on available design artifacts.
rshade/finfocus · .agents/skills/speckit-taskstoissues/SKILL.md · Convert existing tasks into actionable, dependency-ordered GitHub issues for the feature based on available design…
agno-agi/agno · cookbook/02_agents/16_skills/sample_skills/code-review/SKILL.md · Code review assistance with linting, style checking, and best practices
kyegomez/swarms · examples/single_agent/capabilities/skills/multiple_skill_dirs/team_skills/code-review/SKILL.md · Review Python code for bugs, missing tests and security issues using the team's shared standards
basicmachines-co/basic-memory · .agents/skills/code-review/SKILL.md · Use when reviewing Basic Machines code for house style, architecture risk, pre-merge hardening, or whether a change…
nteract/semiotic · .github/skills/code-review/SKILL.md · Review Semiotic pull requests for behavioral bugs, regressions, contract drift, and missing evidence. Use for GitHub…
