Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add FFmorange/QDeskWatch --skill document-sync-reviewgit clone --depth 1 https://github.com/FFmorange/QDeskWatchWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ffmorange/qdeskwatch/document-sync-review)<a href="https://agentmods.dev/skills/ffmorange/qdeskwatch/document-sync-review"><img src="https://agentmods.dev/badge/skills/ffmorange/qdeskwatch/document-sync-review.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00093 | $0.01285 |
| Opus 5 | $0.00046 | $0.00642 |
| Sonnet 5 | $0.00019 | $0.00257 |
| Haiku 4.5 | $0.00009 | $0.00128 |
Grade A, and why
document-sync-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
文档同步审查
先审查文档与当前项目是否一致,再决定是否更新。
更新日期:2026-04-11
工作流程
- 明确本次要检查的文档范围。
- 阅读相关文档和对应的当前仓库内容。
- 提炼出“文档描述”和“仓库实际状态”的差异。
- 当发现文档某一块内容大范围不匹配,或本次需要补充很多新增内容时,可结合文档上次更新时间,检查当前分支在该时间之后的相关 Git 提交,作为理解变化来源的辅助信息。
- 根据任务复杂程度进行分轮自我审查,检查差异结论、影响判断和建议修改方向是否合理。
- 只有在自我审查后认为内容已经足够准确、完整、合适时,才向用户展示差异清单和建议修改方向。
- 在用户明确同意前,不直接改写文档。
- 用户确认后,再基于最新仓库状态更新文档。
- 修改文档时,同步补充或更新该文档中的更新日期。
- 修改完成后,说明本次同步了哪些点、保留了哪些未改项。
适用对象
- 只适用于
docs/下的项目文档
审查重点
- 文件路径是否仍然存在,命名是否一致。
- 目录结构描述是否仍与当前仓库相符。
- 模块职责、插件边界、入口文件描述是否失真。
- 文档是否漏掉新增加的目录、文件或工作流。
- 文档是否误把生成物、IDE 配置、临时产物当成主源码结构。
- 文档中的规则是否与当前项目实际约束冲突。
- 文档是否缺少更新日期,或更新日期未随本次修改同步更新。
差异分析要求
- 差异要按“文档当前写法”与“仓库实际情况”成对描述。
- 能落到具体路径时,尽量给出具体文件或目录路径。
- 区分“事实性差异”和“表达建议”。
- 如果只是措辞风格问题,不要混入事实性错误列表。
- 如果差异来自用户刚刚手动修改的文档或代码,先重新读取最新内容再判断。
自我评审机制
- 在向用户展示差异前,先进行自我评审,不要拿未经审查的初步结论直接询问用户。
- 简单任务,例如单个文档的小范围差异或措辞修正,至少进行 1 轮自审。
- 中等任务,例如一个文档中涉及多个段落、多个路径或多处规则同步,至少进行 2 轮自审。
- 复杂任务,例如跨多个文档或存在规则冲突与适用范围分歧时,至少进行 3 轮自审;如仍不确定,应继续审查后再展示。
- 每轮自审至少检查:事实是否准确、引用路径是否正确、差异是否完整、建议是否过度、是否遗漏冲突点、是否需要先向用户确认范围。
- 只有在自审后认为结论合理、表达清晰、影响可说明时,才进入向用户展示的步骤。
修改前必须做的事
- 先告诉用户发现了哪些不一致。
- 先说明建议如何更新。
- 先询问用户是否要修改。
- 用户没有明确确认前,只做分析,不直接落笔。
询问模板
可按下面这种结构向用户汇报:
- 发现了哪些文档与当前仓库不一致。
- 每一项差异对应的实际路径是什么。
- 建议修改哪些文件。
- 是否现在按这些差异更新文档。
检索与比对规则
- 先读目标文档,再读对应的源码或目录结构,不要只看一边。
- 涉及项目结构时,优先参考
docs/project-file-structure.md,但必须再核对仓库实际状态。 - 文件检索优先用
rg --files,文本检索优先用rg。 - 当文档某块内容差异较大,或明显遗漏了一整批新内容时,可根据文档的上次更新时间,查看当前分支在该时间之后与该主题相关的 Git 提交,用来辅助判断变化脉络。
- Git 提交只能作为辅助线索,不能替代对当前文件、当前目录结构和当前实现的直接核对。
- IDE 配置、编译产物目录应该避免误写进核心结构说明。
- 如果文档与仓库冲突,以仓库当前状态为准,但不要自动覆盖文档,先汇报用户。
不要做的事
- 不要在未确认前直接修改文档。
- 不要把猜测当成差异结论。
- 不要基于过期上下文更新文档。
- 不要把临时文件、构建垃圾或本地环境差异当成项目事实。
- 不要为了“顺手”重写整篇文档,只修改已确认的差异范围。
输出要求
- 差异说明优先简洁、准确、可操作。
- 明确指出“建议更新”与“已执行更新”的区别。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 94 lines · 93 tokens per session scan A 01e3aa493e49
document-sync-review is a skill published in the GitHub repository FFmorange/QDeskWatch (2 stars, last pushed 4mo ago), licensed MIT. It adds 93 tokens to every session and 1,285 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…