Skip to content
Back to skills

Qrspi Review

ASecurity

Codex CLI: review one QRSPI artifact for judgement-level weaknesses — finished-but-wrong, not unfinished — and report; edits nothing. Use only when the user invokes it by name — `$qrspi:qrspi-review` — never because a prompt resembles it; in Claude Code the same command is /qrspi:review.

  • 2 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 16, 2026
ai-agentsgoshell

Works with

  • claude code
  • cli

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned October 16, 2026

npx -y skills add Allan-Nava/qrspi --skill qrspi-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Qrspi Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Qrspi Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/allan-nava-qrspi-review/badge)](https://www.skillsdirectory.com/skills/allan-nava-qrspi-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: qrspi-review
description: Codex CLI: review one QRSPI artifact for judgement-level weaknesses — finished-but-wrong, not unfinished — and report; edits nothing. Use only when the user invokes it by name — `$qrspi:qrspi-review` — never because a prompt resembles it; in Claude Code the same command is /qrspi:review.
argument-hint: thoughts/<dir>/<NN-artifact>.md
disable-model-invocation: true
user-invocable: false
---

# Review a QRSPI artifact

> **Codex CLI form of `/qrspi:review`, invoked as `$qrspi:qrspi-review`.** Same steps, same gates. Plugin paths below
> — `../qrspi/references/…`, `$SKILL_DIR` in shell snippets — are relative to the
> directory holding this `SKILL.md` (Codex tells you where the skill lives; substitute
> the absolute path). `thoughts/…` is relative to the repository you are working in.
> Codex skills carry no tool allowlist: Codex's own approval mode and sandbox govern
> what runs. The read-only promise of this form rests on these instructions alone.

Target: whatever follows `$qrspi:qrspi-review` in the user's message — one artifact file. If a directory is given, list it and ask
which file; do not review all of them at once — a review covers one artifact.

## 1. Load the rubric for this artifact type

Read `../qrspi/references/reviewing.md`. The section that
applies is the one matching the file's `NN-` prefix; the three questions at the top
apply to every artifact.

## 2. Read the artifact — and spot-check it against the repository

Read the target file once. Then, without reading any other artifact:

- For `01`, `02`, `04`: pick **three** `path:line` citations at random and verify each
  with `grep -n` on the repository. A citation that does not hold is the finding — do
  not go on to verify all of them, say that one was off and the rest are suspect.
- For `03`, `04`: pick one step and ask whether a fresh session, holding only this
  file, could execute it. Name what it would have to guess.
- For `02`: for each decision, check that its reason cites a path in the research doc.
  Do not open the research doc to check the path is real — that is Research's review.

Do not read the upstream artifacts wholesale. The review is of this file; if it needs
another file to be understood, that is itself a finding (self-containment).

## 3. Report

A table, most costly first:

| § | Weakness | Why it costs downstream | Severity |
|---|---|---|---|
| | specific: the line, the claim, the missing thing | which later phase pays, and roughly what | blocks / fix before advancing / note |

Then one verdict line: **advance**, **fix first**, or **send back to <phase>**.

Two or three real findings beat a dozen echoes of the checklist. If you find nothing,
say which three citations you checked and which step you tried the zero-context test
on, so the reader knows what "nothing" covered.

## 4. Stop

Do not edit the artifact. Do not run the next phase. Do not fix what you found — the
author does, in the artifact, so the record stays theirs.

Files in this skill

  • SKILL.md3 KB
  • agents/openai.yaml441 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.