技能 comprehensive-code-review
📦

comprehensive-code-review

内容修订 r1 高风险 ⚙️ 外部命令🌐 网络访问

全面审查拉取请求

代码变更可能隐藏运行时故障、需求遗漏以及薄弱的验证方案。此技能会指导 Claude、Codex 或 Claude Code 在合并前完成结构化审查。

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "comprehensive-code-review" from https://skillstore.io/skills/cygnusfear-comprehensive-code-review.md and its manifest at https://skillstore.io/api/skills/cygnusfear-comprehensive-code-review/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/cygnusfear-comprehensive-code-review.md 已签名 manifest GET /api/skills/cygnusfear-comprehensive-code-review/manifest 已签名 lockfile GET /api/skills/cygnusfear-comprehensive-code-review/lockfile

测试它

正在使用“comprehensive-code-review”。 审查一个为 API 处理程序添加重试逻辑的功能 PR。

预期结果:

审查会说明已变更文件，展示重试流程，标记缺失的超时测试，建议共享的重试辅助函数，并列出准确的验证命令。

正在使用“comprehensive-code-review”。 检查一个 PR 是否完整实现其关联的 issue。

预期结果:

审查会列出每项需求，标记已实现和缺失项，引用文件证据，并针对覆盖不完整的部分请求变更。

正在使用“comprehensive-code-review”。 对一个高风险支付工作流变更运行三位审查员。

预期结果:

综合结果会归类多个审查员都发现的问题，分离独有疑虑，并为 PR 作者生成按优先级排序的行动列表。

安全审计

高风险
v8 • 2026/7/5 打开版本化报告

Most static findings are false positives caused by Markdown code fences, inline code references, Mermaid diagrams, and safe shell snippets. No prompt injection attempt was found, but the skill repeatedly requires posting reviews to GitHub and can create blocking PR review actions. Those external publication and workflow-state behaviors need user confirmation.

1
已扫描文件
1,412
分析行数
0
复核项
0
已忽略误报

已确认安全问题 (2)

高
SKILL.md:12-19SKILL.md:1041-1047SKILL.md:1402
Mandatory GitHub Publication Without Confirmation
The skill requires every review to be posted as a GitHub PR comment and treats local-only reviews as failed. This can expose review details to GitHub when a user expected local analysis.
The mandatory posting requirement is repeated in multiple sections and includes a concrete gh pr comment command. The risk depends on user consent and repository visibility, but the publication intent is explicit.
中
SKILL.md:1238-1240SKILL.md:1388-1390
Blocking Pull Request State Changes
The skill instructs agents to use a blocking request-changes review when coverage checks fail. This can alter PR workflow state and should require explicit user authorization.
The instructions explicitly name gh pr review --request-changes and define approval rules that force blocking reviews. This is expected for code review, but it is still an external state change.

风险因素

⚙️ 外部命令 (152)
SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:57-61 SKILL.md:61-67 SKILL.md:67-75 SKILL.md:75-81 SKILL.md:81-100 SKILL.md:100-106 SKILL.md:106-145 SKILL.md:145-178 SKILL.md:178-184 SKILL.md:184-190 SKILL.md:190-194 SKILL.md:194-199 SKILL.md:199 SKILL.md:222-232 SKILL.md:232-236 SKILL.md:236-271 SKILL.md:271-273 SKILL.md:273-284 SKILL.md:284-288 SKILL.md:288-295 SKILL.md:295-299 SKILL.md:299 SKILL.md:301-304 SKILL.md:304 SKILL.md:305-343 SKILL.md:343-354 SKILL.md:354-367 SKILL.md:367-373 SKILL.md:373-376 SKILL.md:376-380 SKILL.md:380 SKILL.md:384-388 SKILL.md:388-389 SKILL.md:389-392 SKILL.md:392-411 SKILL.md:411-416 SKILL.md:416-417 SKILL.md:417-418 SKILL.md:418-419 SKILL.md:419-425 SKILL.md:425-433 SKILL.md:433-443 SKILL.md:443-460 SKILL.md:460-466 SKILL.md:466-478 SKILL.md:478-490 SKILL.md:490-491 SKILL.md:491-492 SKILL.md:492-493 SKILL.md:493-494 SKILL.md:494-495 SKILL.md:495 SKILL.md:496-501 SKILL.md:501-508 SKILL.md:508-511 SKILL.md:511-524 SKILL.md:524-527 SKILL.md:527-536 SKILL.md:536-539 SKILL.md:539-550 SKILL.md:550-569 SKILL.md:569-572 SKILL.md:572-595 SKILL.md:595-597 SKILL.md:597-603 SKILL.md:603-615 SKILL.md:615-617 SKILL.md:617-623 SKILL.md:623-627 SKILL.md:627-638 SKILL.md:638-662 SKILL.md:662-666 SKILL.md:666-670 SKILL.md:670-676 SKILL.md:676-694 SKILL.md:694-698 SKILL.md:698-702 SKILL.md:702-713 SKILL.md:713-716 SKILL.md:716-725 SKILL.md:725-744 SKILL.md:744-748 SKILL.md:748-752 SKILL.md:752-764 SKILL.md:764-789 SKILL.md:789-793 SKILL.md:793-797 SKILL.md:797-806 SKILL.md:806-833 SKILL.md:833-836 SKILL.md:836-929 SKILL.md:929-935 SKILL.md:935-938 SKILL.md:938-943 SKILL.md:943-946 SKILL.md:946-951 SKILL.md:951-955 SKILL.md:955-960 SKILL.md:960-961 SKILL.md:961-962 SKILL.md:962-966 SKILL.md:966-974 SKILL.md:974-986 SKILL.md:986-987 SKILL.md:987-995 SKILL.md:995-1004 SKILL.md:1004-1007 SKILL.md:1007-1010 SKILL.md:1010-1045 SKILL.md:1045-1072 SKILL.md:1072-1075 SKILL.md:1075-1084 SKILL.md:1084-1088 SKILL.md:1088-1091 SKILL.md:1091-1093 SKILL.md:1093-1096 SKILL.md:1096-1102 SKILL.md:1102-1148 SKILL.md:1148-1154 SKILL.md:1154-1162 SKILL.md:1162-1167 SKILL.md:1167-1169 SKILL.md:1169-1171 SKILL.md:1171-1182 SKILL.md:1182-1184 SKILL.md:1184-1194 SKILL.md:1194-1200 SKILL.md:1200-1213 SKILL.md:1213-1225 SKILL.md:1225-1238 SKILL.md:1238-1240 SKILL.md:1240-1276 SKILL.md:1276-1291 SKILL.md:1291-1307 SKILL.md:1307-1313 SKILL.md:1313-1322 SKILL.md:1322-1328 SKILL.md:1328-1341 SKILL.md:1341-1347 SKILL.md:1347-1359 SKILL.md:1359-1365 SKILL.md:1365-1376 SKILL.md:59 SKILL.md:1047-1071 SKILL.md:57-61 SKILL.md:1045-1072
🌐 网络访问 (1)
SKILL.md:986
审计者: codex 查看审计历史 →
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/cygnusfear-comprehensive-code-review/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/cygnusfear-comprehensive-code-review/security.svg)](https://skillstore.io/skills/cygnusfear-comprehensive-code-review?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/cygnusfear-comprehensive-code-review?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cygnusfear-comprehensive-code-review/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/cygnusfear-comprehensive-code-review.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

Cygnusfear. (2026). comprehensive-code-review security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cygnusfear-comprehensive-code-review/audits/8

BibTeX 引用

@techreport{cygnusfear-cygnusfear-comprehensive-code-review-2026, author = {Cygnusfear}, title = {comprehensive-code-review security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/cygnusfear-comprehensive-code-review/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "comprehensive-code-review security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "Cygnusfear" date-released: "2026-07-05" url: "https://skillstore.io/skills/cygnusfear-comprehensive-code-review/audits/8" identifiers: - type: other value: "skillstore:cygnusfear-comprehensive-code-review:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
55
架构
85
可维护性
87
内容
70
社区
70
规范符合性

你能构建什么

合并前拉取请求审查

在合并前审查拉取请求，检查需求遗漏、运行时故障和验证缺口。

Agent 工作质量检查

在请求人工审查员批准之前，审计另一个 AI agent 生成的变更。

关键功能审查

对需要更高置信度的高风险变更运行并行审查员并综合发现项。

试试这些提示

审查当前变更 
使用全面代码审查技能审查我当前的本地变更。重点关注运行时故障、缺失测试以及清晰的修复建议。
审查拉取请求 
使用六轮流程审查 PR #123。包括变更说明、必需修复、可能的简化、问题、建议检查项和任务摘要。
验证 Issue 覆盖情况 
根据此 PR 关联的 issue 审查该 PR。构建需求清单，为每一项引用证据，并对任何缺失工作请求变更。
运行并行审查综合 
为此 PR 运行 code-review-3。启动三次独立审查，比较一致和分歧的发现项，然后综合成一份按优先级排序的审查。

最佳实践

  • 在开始审查前提供 PR 编号、关联 issue 以及任何验收标准。
  • 先运行构建和测试命令，然后要求该技能重点关注剩余风险。
  • 在向 GitHub 发布评论或阻塞性审查之前先确认。

避免

  • 将该技能用于仅检查轻量样式的问题，而这类审查并不需要严格门禁。
  • 在作者批准发布之前，将审查评论发布到 GitHub。
  • 在没有维护者判断的情况下，将生成的审查视为最终结论。

常见问题

此技能只能用于 GitHub 吗？
它围绕 GitHub PR 工作流和 GitHub CLI 设计。也描述了本地 diff 审查。
它可以审查未提交的变更吗？
可以。该技能包含在没有拉取请求可用时使用的本地 git diff 工作流。
并行审查模式有什么不同？
它会要求多个独立审查员检查相同变更，然后合并一致发现和独有发现。
它会自动批准拉取请求吗？
它包含批准和请求变更的命令，但用户应要求在更改 PR 状态之前进行确认。
它支持哪些工具？
报告声明支持 Claude、Codex 和 Claude Code。
这是一个安全审查技能吗？
它可以在代码审查期间标记安全风险，但范围比专门的安全审计更广。

开发者详情

作者

Cygnusfear

许可证

MIT

Skillstore 修订

r1

版本提示

作者未声明版本。

仓库

https://github.com/Cygnusfear/claude-stuff/tree/main/skills/code-review

引用

7e9e368dc1a370f2040369ebcd0db06d90cb48e5

维护新鲜度

2026/7/25

使用量

6 次下载 · 210 次浏览

文件结构

📄 SKILL.md

Cygnusfear 的更多技能

查看全部

相关技能

查看全部