📦
git-commit-message
78Write Clear Git Commit Messages
Vague commit messages make change history difficult to understand. This skill uses staged changes to draft typed subjects and optional bodies explaining the reason.
编码与开发 查看
技能 code-review-checklist
📦
code-review-checklist
内容修订 r1 安全 ⚙️ 外部命令
Review Code with a Five-Axis Checklist
Unstructured code reviews can miss defects and spend time on style preferences. This skill guides five review areas and produces prioritized comments with concrete fixes.
支持: Claude Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "code-review-checklist" from https://skillstore.io/skills/alapha888-code-review-checklist.md and its manifest at https://skillstore.io/api/skills/alapha888-code-review-checklist/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“code-review-checklist”。 A small order-processing diff indexes the first order without checking whether the list is empty.
预期结果:
- Must fix | Correctness | order.py:87: An empty order list causes IndexError. Check for an empty list before accessing its first item.
- Should fix | Test coverage | order.py:87: Add an empty-order test to cover the failing path.
正在使用“code-review-checklist”。 A contributor requests review of a diff containing 650 changed lines.
预期结果:
Scope: The diff exceeds approximately 400 changed lines. Split it into smaller, focused changes before review.
正在使用“code-review-checklist”。 A reviewer suspects a loop is slow but provides no measurements or evidence of repeated work.
预期结果:
Performance: No evidence found to support a performance finding. Do not raise a speculative performance comment.
安全审计
安全v1 • 2026/10/6 打开版本化报告
All six static findings are false positives: Markdown formatting was mistaken for command execution, and ordinary review prose was mistaken for reconnaissance. No evidence found of prompt injection, credential access, or data exfiltration in SKILL.md. The skill contains review guidance and examples, not executable tooling.
1
已扫描文件
57
分析行数
0
复核项
0
已忽略误报
风险因素
⚙️ 外部命令 (5)
最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/alapha888-code-review-checklist/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/alapha888-code-review-checklist?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/alapha888-code-review-checklist?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/alapha888-code-review-checklist/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/alapha888-code-review-checklist.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
alapha888. (2026). code-review-checklist security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/alapha888-code-review-checklist/audits/1BibTeX 引用
@techreport{alapha888-alapha888-code-review-checklist-2026,
author = {alapha888},
title = {code-review-checklist security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/alapha888-code-review-checklist/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "code-review-checklist security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "alapha888"
date-released: "2026-10-06"
url: "https://skillstore.io/skills/alapha888-code-review-checklist/audits/1"
identifiers:
- type: other
value: "skillstore:alapha888-code-review-checklist:audit:1"
description: "Skillstore immutable audit report identifier"
比较变体
2 个可安装变体每位作者的技能都保持为独立的可安装项。推荐变体按 Skillstore 证据排序。
为什么此变体排名第一
证据置信度更高
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
65
社区
91
规范符合性
你能构建什么
Check a change before submission
Review a small diff for edge cases, security risks, and missing tests before opening a pull request.
Standardize team review comments
Apply consistent review categories and priorities while keeping feedback tied to specific lines and concrete fixes.
Evaluate unfamiliar contributions
Review community changes for correctness, readability, and test coverage without focusing on formatting preferences.
试试这些提示
Review a function
Review this function using the five-axis checklist: [paste function with file name and line numbers]. Cite specific lines and suggest concrete fixes.
Review a pull request diff
Review this diff: [paste diff]. Check scope first, then all five axes. Separate Must fix and Should fix comments. Use at most ten comments.
Review a sensitive change
Review this authentication change: [paste diff and requirements]. Check correctness, injection risks, secrets, logging, and remaining axes. Cite evidence and identify missing edge-case tests.
Review with supporting evidence
Review this diff with requirements, tests, and profiling results: [attach context]. Mark each axis pass, fail, or N-A. Prioritize concrete fixes within ten comments.
最佳实践
- Provide the diff, file names, line numbers, and relevant requirements.
- Split changes over approximately 400 lines into focused reviews.
- Require evidence and a concrete fix for each comment, and clarify team merge-blocking rules.
避免
- Approve a change without reading the complete diff.
- Spend review comments on formatting preferences instead of substantive defects.
- Report vague problems or performance concerns without code references and evidence.
常见问题
What does the checklist cover?
It covers correctness, security, readability, performance, and test coverage, in that order.
Does the skill run tests or security scans?
No. It supplies review guidance and examples, not test execution or scanning tools.
How large should a review be?
The skill asks for a split when a diff exceeds approximately 400 changed lines.
How many comments should a review contain?
The limit is ten comments. When problems exceed that limit, the guidance recommends requesting a rewrite.
Does it review formatting preferences?
No. It leaves indentation, quote choices, and semicolons to linters.
Which findings block a merge?
The guidance is inconsistent: correctness alone blocks in one section, while security also requires fixes in another. Define your team policy explicitly.
开发者详情
作者
alapha888许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
9bbb9af75d2f5ea5acb8fac5aec75713670a067f
维护新鲜度
2026/10/6
使用量
0 次下载 · 0 次浏览
文件结构
📄 SKILL.md
alapha888 的更多技能
查看全部📦
deep-research-framework
78Build Research Reports with Traceable Evidence
Research reports can hide weak sources, stale facts, and unsupported conclusions. This framework guides clear questions, independent verification, and conclusion-first writing with explicit uncertainty.
研究与学习 查看
📦
meeting-notes
78Turn Meeting Notes into Clear Minutes
Rough meeting notes can hide decisions, responsibilities, and unresolved issues. This skill organizes pasted notes into concise minutes with clear actions and explicit markers for missing details.
效率 查看
📦
tech-writing-proofread
77Proofread English Technical Documents
Technical drafts can contain language errors and inconsistent terminology that make instructions harder to follow. This skill provides specific corrections, reasons, and issue counts while preserving the authorial voice.
写作与内容 查看
📦
session-handoff
77Preserve Coding Progress Across Agent Sessions
Ending a long coding session can lose decisions, verified progress, and unresolved tasks. This skill organizes that context into a structured note for the next session.
效率 查看
相关技能
查看全部📦
code-reviewer
83使用结构化质量检查审查代码
由 alirezarezvani
代码审查可能会漏掉质量、安全性和可维护性问题。此技能通过脚本、检查清单和报告生成来指导结构化审查。
编码与开发 查看
📦
gauntlet
90Review Defects and Verify Root-Cause Repairs
由 aakashh242
Reviews can miss failure conditions or accept fixes without reliable evidence. Gauntlet guides scoped adversarial reviews, authorized repairs, and revision-bound verification within a finite budget.
编码与开发 查看
📦
nestjs-code-audit
84Audit NestJS Code with Evidence-Backed Findings
由 amirtaherkhani
NestJS repositories can hide boundary flaws and runtime risks that lint results alone cannot reveal. This skill combines local evidence collection and semantic review into one prioritized report.
编码与开发 查看
📦
code-review
80审查代码中的缺陷和安全问题
由 21pounder
代码审查可能会漏掉缺陷、安全漏洞和可维护性问题。此技能会引导 Claude、Codex 和 Claude Code 完成结构化的审查步骤。
编码与开发 查看
📦
github-pr
80更快审查 GitHub 拉取请求
由 Bind
代码审查协调通常需要反复执行 GitHub CLI 检查并发表评论。此技能记录了用于分诊、指南查找和行内反馈的 PR 审查辅助工具。
编码与开发 查看
📦
examples-code-reviewer
80使用结构化 AI 反馈进行代码审查
由 EnactProtocol
当上下文有限时，手动代码审查可能会漏掉 bug、风格问题和高风险模式。此技能会审查提供的代码，并返回按优先级排列的问题、建议、摘要和质量评分。
编码与开发 查看