📦

review-agent

Name: review-agent
Author: openai

Revisão do conteúdo r1 Seguro ⚙️ Comandos externos

Review Code Changes for Actionable Defects

Code changes can introduce defects that broad summaries or style checks miss. This skill performs a read-only review and reports concrete findings by priority.

Suporta: Claude Codex Code(CC)

🥉 78 Bronze

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "review-agent" from https://skillstore.io/skills/review-agent.md and its manifest at https://skillstore.io/api/skills/review-agent/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/review-agent.md manifest assinado GET /api/skills/review-agent/manifest lockfile assinado GET /api/skills/review-agent/lockfile

Testar

Usando "review-agent". Review the current uncommitted authentication changes.

Resultado esperado:

P1: Preserve token expiry validation in the refresh path. The changed branch accepts expired refresh tokens when cached metadata is missing.
Overall assessment: The authentication change has one urgent correctness and security defect. Add coverage for expired tokens without cached metadata.

Usando "review-agent". Review commit 4f28c91 for actionable defects.

Resultado esperado:

No findings. The reviewed change preserves existing behavior, and the relevant tests cover the modified paths.

Usando "review-agent". Review the feature branch against its base branch.

Resultado esperado:

P2: Restore pagination after filtered results. The new filter resets the cursor but does not request the next page.
Overall assessment: The branch has one user-visible pagination regression. Add a test that combines filtering with multiple result pages.

Auditoria de segurança

Seguro

v1 • 17/08/2026 Abrir o relatório versionado

One static finding is confirmed because the skill directs the agent to run read-only Git commands. Seven findings are false positives caused by Markdown backticks around filenames, labels, and example text.

Arquivos analisados

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Itens de revisão de capacidade (1)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Médio

SKILL.md:24

Ruby/shell backtick execution

`git merge-base HEAD <comparison-ref>`, then inspect `git diff <merge-base-sha>`. If the local

The skill explicitly directs the agent to run git merge-base and git diff. These are intended read-only external commands.

Fatores de risco

⚙️ Comandos externos (8)

SKILL.md:14 SKILL.md:24 SKILL.md:43 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:55

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/review-agent/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/review-agent/security.svg)](https://skillstore.io/skills/review-agent?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/review-agent?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/review-agent/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/review-agent.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

openai. (2026). review-agent security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/review-agent/audits/1

Citação BibTeX

@techreport{openai-review-agent-2026,
  author = {openai},
  title = {review-agent security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/review-agent/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "review-agent security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "openai"
date-released: "2026-08-17"
url: "https://skillstore.io/skills/review-agent/audits/1"
identifiers:
  - type: other
    value: "skillstore:review-agent:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Check Work Before Commit

Review local changes for regressions before creating a commit or requesting peer review.

Assess a Branch Difference

Compare a feature branch with its merge base and identify defects that would enter the target branch.

Support Release Validation

Review a selected commit for release blockers, urgent defects, and material test gaps.

Teste estes prompts

Review Local Changes

Review my uncommitted changes. Report only concrete defects introduced by the diff, ordered by priority.

Review a Commit

Review commit [commit SHA]. Check surrounding code, tests, and call sites. Cite the smallest relevant changed lines.

Review Against a Base Branch

Review the changes that would merge into [base branch]. Use the merge base and report actionable regressions with priority labels.

Run a Targeted Security Review

Review [target] for security and correctness regressions. Trace affected call paths, verify tests, and explain each demonstrated failure scenario.

Boas práticas

Specify the exact commit, branch, or uncommitted change set to review.
Provide relevant acceptance criteria when intentional behavior changes may resemble regressions.
Keep tests and repository history available so the agent can verify findings.

Evitar

Do not ask the skill to fix code or create commits because its workflow is read-only.
Do not request style feedback when no meaningful correctness or maintainability impact exists.
Do not treat the review as a substitute for tests, runtime validation, or human approval.

Perguntas frequentes

What changes can this skill review?

It can review uncommitted changes, a selected commit, a base-branch difference, or another clearly defined target.

Does the skill edit my repository?

No. It is instructed not to modify files, create commits, push branches, or post review comments.

How are findings prioritized?

Findings use P0 for critical blockers, P1 for urgent defects, P2 for ordinary defects, and P3 for low-impact issues.

Will it report style issues?

It excludes style concerns unless they create a meaningful maintainability problem or obscure the code.

What happens when no defects are found?

The skill states that no findings were found and adds a brief assessment of remaining test gaps or risks.

Does a clean review prove the change is correct?

No. Results depend on available context and cannot guarantee detection of every defect or runtime condition.

Detalhes do desenvolvedor

Autor

openai

Licença

MIT

Revisão da Skillstore

Aviso de versão

O autor não declarou uma versão.

Repositório

https://github.com/openai/codex/tree/e38290846c11424567c9c8226f2be8a2886c5929/codex-rs/skills/src/assets/samples/review-agent

Referência

bc37f12c64ad89ca965c1e90d44012af0469ec4e

Atualidade da manutenção

17/08/2026

Uso

0 downloads · 0 visualizações

Estrutura de arquivos

📁 agents/

📄 openai.yaml

📄 SKILL.md