agentsclimarketplace
Sign in

Review workflow activity

Skill diagrid-labs/dapr-skills/skills/review-workflow-activity

This skill reviews Dapr Workflow activity implementations for idempotency, retries, error boundaries, and convention violations. Use this skill when the user asks to "review workflow activities", "check activity idempotency", "audit Dapr activities", or similar.From its SKILL.md

Install
npx -y skills add diagrid-labs/dapr-skills --skill review-workflow-activity

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 11 stars11 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

3.3 KB, 730 tokens by cl100k_base, as published. Nobody here has run it

Review Dapr Workflow — Activities

Overview

Scans the bodies of Dapr Workflow activity classes/functions for idempotency issues, swallowed exceptions, payload size risks, cancellation handling, and convention violations. Read-only: this skill never modifies source files. Workflow body code and management endpoints are out of scope and are covered by review-workflow-determinism and review-workflow-management.

Execution Order

You MUST follow these phases in strict order. Do not load files outside the agreed scope, and do not write or edit any files.

  1. Resolve scope — Read ../shared/review-scope-prompt.md and follow it to set scope_root.
  2. Detect target — Read ../shared/review-detect-target.md and follow it to produce language and activity_files. If activity_files is empty, emit a single warning finding (no activity files found) and stop.
  3. Load checklist — Based on language, read exactly one of:
  4. Scan — For each activity file in scope, apply every rule from the loaded checklist using Grep and Read. For each match, capture file:line, the rule id, and a short evidence snippet. Confirm the match is inside an activity body (see "Cross-reference" in each checklist) before promoting it from "Please verify" to a graded severity.
  5. Report — Format every finding using the canonical template from ../shared/review-report-format.md. Group by severity, then rule id, then file path.
  6. Show final message — Your last output is the report. Do not append a summary, follow-up question, or next-action prompt other than the ## Next steps block defined by the report format.

Prerequisites

  • Read access to the project directory.
  • No build, compile, or run step is required — this skill is fully static.

Allowed tools

Read, Grep, Glob only. The skill MUST NOT call Bash, Write, or Edit.

Rules

The full rule list, including detection patterns, severities, and suggested fixes, lives in the loaded language checklist:

Rule ids are stable across releases. New rules append; deprecated rule ids are reserved.

Show final message

The last thing you emit MUST be the report from step 5, including the ## Next steps section. The ## Next steps block should suggest:

  • Run review-workflow-determinism next if it has not yet been run on this scope.
  • Run review-workflow-management next if any management files exist.
  • Re-run this skill after fixes if any critical findings were reported.

Do not add any text after the report.

What ships with it: 1 file

2.5 KB alongside SKILL.md

Gives 0 of the 12 instructions most review quality skills give in 730 tokens

Counted across 1,273 of the 2,403 authors here whose files we hold, read 2026-09-06

  • Ask one question at a timein 63 of 1273, across 62 files
  • Provide a recommended answer for each questionin 47 of 1273, across 45 files
  • Rank findings by severityin 44 of 1273
  • Use parameterized queries for database accessin 38 of 1273, across 20 files
  • Validate all user input with schemasin 33 of 1273, across 15 files
  • Store secrets in environment variablesin 32 of 1273, across 14 files
  • Explore the codebase to answer questionsin 31 of 1273, across 29 files
  • Store tokens in httpOnly cookiesin 30 of 1273, across 12 files
  • Implement rate limiting on API endpointsin 30 of 1273, across 12 files
  • Sanitize user-provided HTMLin 29 of 1273, across 11 files
  • Return generic error messages to usersin 28 of 1273, across 10 files
  • Cite file and line for every findingin 28 of 1273, across 25 files

Said here and by no other author read

  • Follow phases in strict order
  • Resolve scope using shared prompt
  • Detect target files for language
  • Scan activity files using grep and read
  • Confirm matches are inside activity bodies
  • Format findings using canonical template

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.