📦

review-agent

Name: review-agent
Author: openai

Ревизия содержимого r1 Безопасно ⚙️ Внешние команды

Review Code Changes for Actionable Defects

Code changes can introduce defects that broad summaries or style checks miss. This skill performs a read-only review and reports concrete findings by priority.

Поддерживает: Claude Codex Code(CC)

🥉 78 Бронза

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "review-agent" from https://skillstore.io/skills/review-agent.md and its manifest at https://skillstore.io/api/skills/review-agent/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/review-agent.md Подписанный manifest GET /api/skills/review-agent/manifest Подписанный lockfile GET /api/skills/review-agent/lockfile

Протестировать

Использование «review-agent». Review the current uncommitted authentication changes.

Ожидаемый результат:

P1: Preserve token expiry validation in the refresh path. The changed branch accepts expired refresh tokens when cached metadata is missing.
Overall assessment: The authentication change has one urgent correctness and security defect. Add coverage for expired tokens without cached metadata.

Использование «review-agent». Review commit 4f28c91 for actionable defects.

Ожидаемый результат:

No findings. The reviewed change preserves existing behavior, and the relevant tests cover the modified paths.

Использование «review-agent». Review the feature branch against its base branch.

Ожидаемый результат:

P2: Restore pagination after filtered results. The new filter resets the cursor but does not request the next page.
Overall assessment: The branch has one user-visible pagination regression. Add a test that combines filtering with multiple result pages.

Аудит безопасности

Безопасно

v1 • 17.08.2026 Открыть версионный отчет

One static finding is confirmed because the skill directs the agent to run read-only Git commands. Seven findings are false positives caused by Markdown backticks around filenames, labels, and example text.

Просканировано файлов

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Пункты проверки возможностей (1)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Средний

SKILL.md:24

Ruby/shell backtick execution

`git merge-base HEAD <comparison-ref>`, then inspect `git diff <merge-base-sha>`. If the local

The skill explicitly directs the agent to run git merge-base and git diff. These are intended read-only external commands.

Факторы риска

⚙️ Внешние команды (8)

SKILL.md:14 SKILL.md:24 SKILL.md:43 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:55

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/review-agent/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/review-agent/security.svg)](https://skillstore.io/skills/review-agent?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/review-agent?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/review-agent/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/review-agent.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

openai. (2026). review-agent security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/review-agent/audits/1

Цитата BibTeX

@techreport{openai-review-agent-2026,
  author = {openai},
  title = {review-agent security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/review-agent/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "review-agent security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "openai"
date-released: "2026-08-17"
url: "https://skillstore.io/skills/review-agent/audits/1"
identifiers:
  - type: other
    value: "skillstore:review-agent:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Check Work Before Commit

Review local changes for regressions before creating a commit or requesting peer review.

Assess a Branch Difference

Compare a feature branch with its merge base and identify defects that would enter the target branch.

Support Release Validation

Review a selected commit for release blockers, urgent defects, and material test gaps.

Попробуйте эти промпты

Review Local Changes

Review my uncommitted changes. Report only concrete defects introduced by the diff, ordered by priority.

Review a Commit

Review commit [commit SHA]. Check surrounding code, tests, and call sites. Cite the smallest relevant changed lines.

Review Against a Base Branch

Review the changes that would merge into [base branch]. Use the merge base and report actionable regressions with priority labels.

Run a Targeted Security Review

Review [target] for security and correctness regressions. Trace affected call paths, verify tests, and explain each demonstrated failure scenario.

Лучшие практики

Specify the exact commit, branch, or uncommitted change set to review.
Provide relevant acceptance criteria when intentional behavior changes may resemble regressions.
Keep tests and repository history available so the agent can verify findings.

Избегать

Do not ask the skill to fix code or create commits because its workflow is read-only.
Do not request style feedback when no meaningful correctness or maintainability impact exists.
Do not treat the review as a substitute for tests, runtime validation, or human approval.

Часто задаваемые вопросы

What changes can this skill review?

It can review uncommitted changes, a selected commit, a base-branch difference, or another clearly defined target.

Does the skill edit my repository?

No. It is instructed not to modify files, create commits, push branches, or post review comments.

How are findings prioritized?

Findings use P0 for critical blockers, P1 for urgent defects, P2 for ordinary defects, and P3 for low-impact issues.

Will it report style issues?

It excludes style concerns unless they create a meaningful maintainability problem or obscure the code.

What happens when no defects are found?

The skill states that no findings were found and adds a brief assessment of remaining test gaps or risks.

Does a clean review prove the change is correct?

No. Results depend on available context and cannot guarantee detection of every defect or runtime condition.

Сведения для разработчиков

Автор

openai

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/openai/codex/tree/e38290846c11424567c9c8226f2be8a2886c5929/codex-rs/skills/src/assets/samples/review-agent

Ссылка

bc37f12c64ad89ca965c1e90d44012af0469ec4e

Актуальность поддержки

17.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📁 agents/

📄 openai.yaml

📄 SKILL.md