Skills cloudbase-code-review

📦

cloudbase-code-review

Name: cloudbase-code-review
Author: tencentcloudbase

v2.23.8 Content revision r1 Safe ⚡ Contains scripts⚙️ External commands📁 Filesystem access🌐 Network access

Review CloudBase Code Before Release

CloudBase apps often fail because auth, database, RLS, and storage rules are easy to misapply. This skill applies CloudBase-specific review checks before users ship or submit code.

Supports: Claude Codex Code(CC)

🥉 79 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "cloudbase-code-review" from https://skillstore.io/skills/tencentcloudbase-cloudbase-code-review.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-cloudbase-code-review/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/tencentcloudbase-cloudbase-code-review.md Signed manifest GET /api/skills/tencentcloudbase-cloudbase-code-review/manifest Signed lockfile GET /api/skills/tencentcloudbase-cloudbase-code-review/lockfile

Test it

Using "cloudbase-code-review". Review a new CloudBase Web login flow before release.

Expected outcome:

Findings are grouped by auth, database, storage, and rule coverage.
Each issue explains the affected file, the CloudBase rule, and a direct fix.

Using "cloudbase-code-review". Check whether my CloudBase PostgreSQL app is ready for upload features.

Expected outcome:

The review covers table creation, RLS policies, storage domain setup, and upload result handling.
The response separates blocking errors from warnings and follow-up checks.

Using "cloudbase-code-review". Prepare a CloudBase project for final grading.

Expected outcome:

The final review lists the highest-risk issues first.
It also identifies rules that need manual verification in the CloudBase environment.

Security Audit

Safe

v2 • 7/9/2026 Open versioned report

The static findings are false positives from markdown examples, inline code identifiers, and an optional local lint script. I found no prompt injection, exfiltration intent, hidden payloads, or unauthorized command execution in the reviewed files.

Files scanned

1,154

Lines analyzed

Review items

False positives ignored

Risk Factors

⚡ Contains scripts (1)

references/lint-rules/README.md:327

⚙️ External commands (32)

📁 Filesystem access (18)

🌐 Network access (2)

SKILL.md:12 SKILL.md:13

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/tencentcloudbase-cloudbase-code-review/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-code-review/security.svg)](https://skillstore.io/skills/tencentcloudbase-cloudbase-code-review?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/tencentcloudbase-cloudbase-code-review?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-code-review/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/tencentcloudbase-cloudbase-code-review.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

tencentcloudbase. (2026). cloudbase-code-review security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-cloudbase-code-review/audits/2

BibTeX citation

@techreport{tencentcloudbase-tencentcloudbase-cloudbase-code-review-2026,
  author = {tencentcloudbase},
  title = {cloudbase-code-review security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/tencentcloudbase-cloudbase-code-review/audits/2},
  note = {Author version 2.23.8}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloudbase-code-review security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
  - name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-cloudbase-code-review/audits/2"
identifiers:
  - type: other
    value: "skillstore:tencentcloudbase-cloudbase-code-review:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review A Web App

Check a CloudBase Web app for auth guards, SDK misuse, storage setup, and database access mistakes.

Validate Database Changes

Review PostgreSQL or NoSQL changes for table setup, permissions, RLS policies, and ownership fields.

Prepare Submission

Run a final CloudBase-focused review before a grader, demo, or production release.

Try These Prompts

Review Basic Project

Review my CloudBase project for common mistakes. Focus on the modules present in the code and explain the most important fixes first.

Check Auth Flow

Check the authentication flow in this CloudBase app. Verify route guards, session checks, provider setup, and anonymous user handling.

Audit Database And Storage

Audit PostgreSQL and storage behavior for this CloudBase app. Check table creation, RLS policies, upload setup, and stored file references.

Run Full Release Review

Perform a full CloudBase code review before release. Use the rule index, optional lint guidance with my approval, and semantic review for cross-module issues.