review-lessons SKILL.md skillA
review-lessons from moonlight-lupin/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add moonlight-lupin/agent-skills/review-lessons@v1.0.0Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- moonlight-lupin/agent-skills
- Path
plugins/dev-pipeline/skills/review-lessons/SKILL.md- Versions recorded
- 1
- Latest version
- v1.0.0, committed Oct 27, 2026
- Size
- 5,680 bytes
- Repository stars
- 119
- License
- MIT
Library of lessons from past build-review loops — not a stage. Use when a review or fix round hits a specific case: a reviewer BLOCKING that contradicts the brief, a test that passes but checks nothing, a feature dead in production, SQLite/WAL migrations, MCP tool surfaces, REST API authz, app ↔ external-source sync, Android/APK verification, fill-template extraction, CLI/git mechanics, reviewer outages. Load the one file the case needs; never load the whole library.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Review Lessons
What past loops taught, filed by case. The dev-pipeline's PROCESS lives in
the stage skills — round budgets, severity floor and stop conditions in
`review-commit/references/confirm-round-protocol.md`, model names in
`orchestrator/references/lanes.md`. Where a lesson here disagrees with those
files, they win: lessons are dated evidence, the protocol is the current rule.
**How to use:** find the case below, read that one file, apply it to the
finding in front of you. Don't preload — most of these are project-specific.
**Old names:** these files predate v0.2. "build-review-loop", "codex-confirm-loop"
and "subagent-driven-development" in them mean today's `review-commit` and
`build` stages; model names in them are what ran at the time, not current
pins. Numbered references ("pitfall #N", "rule #N") point at the retired v0.1
stage SKILL.md numbering, which no longer exists — treat them as historical
context, not as pointers to read.
## By case
### Adjudicating findings and fix rounds
| Case | File |
|---|---|
| Reviewer BLOCKING contradicts the dispatch spec or a contract test; deferred findings as design questions | `references/review-findings-adjudication.md` |
…Read the whole file at its exact version.
How to install
mdr add moonlight-lupin/agent-skills/review-lessons@sha256:b0e8568fb4f7c013The line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_yy232tkurjudkesd)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 27, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5680 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
moonlight-lupin/agent-skills · 119 stars · license MIT · pushed 2026-10-30 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_yy232tkurjudkesd GET https://markdownregistry.com/api/v1/resolve?ref=moonlight-lupin/agent-skills/review-lessons GET https://markdownregistry.com/api/v1/blob/b0e8568fb4f7c013d954c0dfd11fa4b8c3ef01ab965443215acc4a3e5df141cc
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.