worth-fix SKILL.md skillA
worth-fix from luochang212/skill-zoo is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add luochang212/skill-zoo/worth-fix@git:20261023.11cd062Pins git:20261023.11cd062 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- luochang212/skill-zoo
- Path
skills/worth-fix/SKILL.md- Versions recorded
- 2
- Latest version
- git:20261023.11cd062, committed Oct 23, 2026
- First version recorded
- Aug 14, 2026
- Size
- 7,542 bytes
- Repository stars
- 124
- License
- MIT
分析和判断任何论断、报告、想法或需求的真实性、价值与做法。当用户说"这个 bug 是真的吗"、"分析一下这个问题/这个报告/这个说法"、"这个修复值得做吗"、"帮我看下这个建议靠不靠谱"，或用户给出一个待评估的 bug 报告、文章摘录、设计提案时使用。先核验、复现、定级、讲清原理、判断是否值得做，而不是直接相信或直接动手改代码。也适用于评估"要不要重构"。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Worth Fix（值得修吗？先验证，再判断） ## 核心态度 - **一切论断都是假说**。报告、博客、AI 输出、甚至自己的第一印象，都要过一遍"这是真的吗"。来源可信不等于内容正确。 - **实证优先于推理**。能跑就测，能复现就复现。读代码推断的"应该是这样"不如一次实测的"实际是这样"。只有说"我实测过"才有资格说"坐实"。 - **区分"属实"与"值得修"**。真不代表要动，假也不代表不用查。真实性判断与价值判断是两个独立维度，分开做。 - **敢证伪，也敢修正严重度**。报告夸大（如"栈溢出崩溃"实测只是报错）或缩小，都要如实修正，不将就原文结论。 ## 工作流 **环节可裁剪性**：最小复现、核实前提、判定值得、留痕是必须环节；威胁建模、讲清原理、沟通格式按风险/规模裁剪。小 change、一眼看穿的修复可跳过重环节，不必走全套仪式。 ### 1. 把论断转成可验证的命题 把"报告说 X 会崩"改写成"当条件 C 满足时，行为 B 是否发生"。一个论断拆成几个可独立验证的命题，逐个验证。 ### 2. 最小测试直击真实代码路径 写最小复现（临时测试/脚本），**直接调用真实的生产函数**，不要测试模拟器或复制逻辑。用 `--nocapture` 打印关键中间证据（如"外部文件被复制 = true"）。 复现验证缺陷后，**把同一场景翻转断言固化为回归测试**（红→绿：先证明缺陷存在，修复后证明行为正确）。复现是回归测试的原材料，不是看完现象就扔。临时脚手架可删，场景必须留下。 **复现不可行时**：先评估是否缺少测试注入点（路径硬编码、函数不可注入）或会污染真实环境（写入用户目录、破坏真实数据）。评估后仍不可行，改用结构验证（代码控制流审查 + 全套测试无回归），并**把验证边界记录进交付物**（如 proposal 的 Impact：哪些实证、哪些审查、为什么）。其中"未实测"必须标注，不得以审查冒充实证。 ### 3. 核实推理链上的每个前提 攻击面/缺陷的可达性由多个环节组成（如：归档保留软链 → 解压物化 → 复制跟随）。**每一环都单独验证**，不因"看起来显然"跳过。特别注意验证依赖库的真实行为（读库源码或构造输入实测），而不是按常识假设。 ### 4. 判定"属实"程度 对每个命题给出结论分级：**坐实 / 部分属实（有夸大或缩小）/ 证伪**。逐条说明证据。区分"现象为真"与"影响为真"。现象成立但后果被夸大了，就要如实修正定级。 ### 5. 判定"值得修" 属实 ≠ 值得修。按四维评估：**触发概率、影响面、修复成本、不修的后果**。高成本低概率的排队，低成本高影响的立即做；报告里"属实但不值得修"的条目要明确列出，并说明为什么。不要为了显得勤快而修不值得修的。 …
Read the whole file at its exact version.
How to install
mdr add luochang212/skill-zoo/worth-fix@sha256:9152b4ce6d105f9fThe line at the top of this page pins the label git:20261023.11cd062, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_yxfo65srnl7n6kbu)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Aug 14, 2026 and Oct 23, 2026, about one every 70 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261023.11cd062 latest | 2026-10-23 | 11cd062 | 7,542 B | A | view · diff |
| git:20260814.30f95a0 | 2026-08-14 | 30f95a0 | 7,551 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7542 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
luochang212/skill-zoo · 124 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_yxfo65srnl7n6kbu GET https://markdownregistry.com/api/v1/resolve?ref=luochang212/skill-zoo/worth-fix GET https://markdownregistry.com/api/v1/blob/9152b4ce6d105f9f3fd1371ce22583c78c7f69d9e85090a6dbf32c16efd16e00
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.