pubky-code-review SKILL.md skillA

pubky-code-review from pubky/pubky-app is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add pubky/pubky-app/pubky-code-review@git:20261009.f54b19a

Pins git:20261009.f54b19a in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
pubky/pubky-app
Path
.agents/skills/pubky-code-review/SKILL.md
Versions recorded
2
Latest version
git:20261009.f54b19a, committed Oct 9, 2026
First version recorded
Sep 15, 2026
Size
10,972 bytes
Repository stars
26
License
MIT

Run a local code review of a diff against this repo's architecture rules (AGENTS.md, .greptile/config.json) and quality standards. Use when the user asks to review code, check for violations, or audit changes before opening a PR.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Local Code Review

Review a change against the project's rules with three focused read-only reviewers, a deterministic callouts pass, and the project's own checks when they are available. Print one status line once the scope is known, then the report. Do not narrate the steps in between.

## Step 1 — Determine the scope

Work out what to review without asking when the answer is already known:

| Signal                                                                                                      | Scope                            |
| ----------------------------------------------------------------------------------------------------------- | -------------------------------- |
| The request or the skill argument names a branch, a PR number, one or more paths, or says local/uncommitted | Use it                           |
| Uncommitted changes exist (`git status --porcelain` is non-empty) and nothing was named                     | Local uncommitted changes        |
| Feature branch with a clean tree                                                                            | Full branch diff against `dev`   |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add pubky/pubky-app/pubky-code-review@sha256:ee1af327a55c731a

The line at the top of this page pins the label git:20261009.f54b19a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_xzf7lfm2s6ssqw7k.svg)](https://markdownregistry.com/a/art_xzf7lfm2s6ssqw7k)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between Sep 15, 2026 and Oct 9, 2026, about one every 24 days.

versioncommittedcommitsizeaudit
git:20261009.f54b19a latest2026-10-09 f54b19a 10,972 BA view · diff
git:20260915.d786bb42026-09-15 d786bb4 10,996 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (10972 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

pubky/pubky-app · 26 stars · license MIT · pushed 2026-11-02 · branch dev

API

GET https://markdownregistry.com/api/v1/artifacts/art_xzf7lfm2s6ssqw7k
GET https://markdownregistry.com/api/v1/resolve?ref=pubky/pubky-app/pubky-code-review
GET https://markdownregistry.com/api/v1/blob/ee1af327a55c731aed716d63b0e09d0d2b9432a4ab9bc12a42f19c781aa182b1

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from pubky/pubky-app

pubky-staging-invite SKILL.md skill
pubky/pubky-app · .agents/skills/pubky-staging-invite/SKILL.md · Mints a single-use signup token for the Pubky staging homeserver. Use when the user explicitly asks for a new staging…
git:20260915.d786bb4 · audit A · 26 stars
sentry-nextjs-sdk SKILL.md skill
pubky/pubky-app · .agents/skills/sentry-nextjs-sdk/SKILL.md · Full Sentry SDK setup for Next.js. Use when asked to "add Sentry to Next.js", "install @sentry/nextjs", or configure…
git:20260507.298cb6e · audit A · 26 stars
architecture Cursor rule
pubky/pubky-app · .cursor/rules/architecture.mdc · Core architecture rules - layer separation, dependencies, and anti-patterns
git:20260309.80c3cb2 · audit B · 26 stars
commit-message Cursor rule
pubky/pubky-app · .cursor/rules/commit-message.mdc · Enforce conventional commit message format
git:20260309.80c3cb2 · audit B · 26 stars
component-testing Cursor rule
pubky/pubky-app · .cursor/rules/component-testing.mdc · Writing unit tests for UI component rendering
git:20261009.f54b19a · audit B · 26 stars
components Cursor rule
pubky/pubky-app · .cursor/rules/components.mdc · Component development patterns - Shadcn first, atomic design, Figma parity
git:20260309.80c3cb2 · audit B · 26 stars
data-patterns Cursor rule
pubky/pubky-app · .cursor/rules/data-patterns.mdc · Data patterns - composite IDs, streams, TTL, pipes normalization
git:20260915.d786bb4 · audit B · 26 stars
env-variables Cursor rule
pubky/pubky-app · .cursor/rules/env-variables.mdc · Build-time Env and runtime PUBKY_RUNTIME_* configuration rules
git:20260915.d786bb4 · audit A · 26 stars
error-handling Cursor rule
pubky/pubky-app · .cursor/rules/error-handling.mdc · Error handling conventions using AppError across all layers
git:20260915.d786bb4 · audit B · 26 stars
local-first Cursor rule
pubky/pubky-app · .cursor/rules/local-first.mdc · Local-first write patterns and controller naming conventions
git:20260915.d786bb4 · audit B · 26 stars
pwa Cursor rule
pubky/pubky-app · .cursor/rules/pwa.mdc · PWA / service worker — shell-only precache, no data caching, user-consented updates, static offline fallback, manifest…
git:20260918.b35cf7a · audit A · 26 stars
sentry Cursor rule
pubky/pubky-app · .cursor/rules/sentry.mdc · Observability conventions (Sentry + Pulse) — capture funnel, direct-call rule and the Pulse consent gate
git:20260923.a27e420 · audit A · 26 stars

Every file in pubky/pubky-app

Browse by kind, by grade A, or by owner.