技能 code-quality

📦

code-quality

Name: code-quality
Author: shreyam1008

内容修订 r1 安全 ⚙️ 外部命令🌐 网络访问

Review and Simplify Code Without Losing Correctness

Complex logic and unnecessary abstractions make code harder to maintain and can hide failures. This skill guides focused reviews and refactors that preserve behavior, public contracts, and security checks.

支持: Claude Codex Code(CC)

🥉 78 青铜

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "code-quality" from https://skillstore.io/skills/shreyam1008-code-quality.md and its manifest at https://skillstore.io/api/skills/shreyam1008-code-quality/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/shreyam1008-code-quality.md 已签名 manifest GET /api/skills/shreyam1008-code-quality/manifest 已签名 lockfile GET /api/skills/shreyam1008-code-quality/lockfile

测试它

正在使用“code-quality”。 Review a search workflow where an earlier request can complete after a later request.

预期结果:

Finding: an older response can overwrite the current search results.
Consequence: users can see results that do not match their latest query.
Recommendation: accept results only when they belong to the current request.
Validation: test responses completing in reverse order and cancellation during an active request.

正在使用“code-quality”。 Assess whether a wrapper around a standard parser can be removed.

预期结果:

Check callers for custom defaults, error handling, and compatibility requirements before removing the wrapper.
Replace the wrapper only when the standard parser preserves the required behavior.
Validate empty inputs, malformed inputs, and failure contracts.
Keep the wrapper when it represents a real ownership or compatibility boundary.

安全审计

安全

v1 • 2026/10/2 打开版本化报告

All three static findings are false positives: Markdown inline formatting and reference links do not execute commands or initiate network requests. No evidence found of prompt injection, data exfiltration, or malicious instructions in the reviewed SKILL.md.

已扫描文件

分析行数

复核项

已忽略误报

风险因素

⚙️ 外部命令 (1)

SKILL.md:41

🌐 网络访问 (2)

SKILL.md:40 SKILL.md:41

最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/shreyam1008-code-quality/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/shreyam1008-code-quality/security.svg)](https://skillstore.io/skills/shreyam1008-code-quality?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/shreyam1008-code-quality?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shreyam1008-code-quality/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/shreyam1008-code-quality.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

shreyam1008. (2026). code-quality security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/shreyam1008-code-quality/audits/1

BibTeX 引用

@techreport{shreyam1008-shreyam1008-code-quality-2026,
  author = {shreyam1008},
  title = {code-quality security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/shreyam1008-code-quality/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "code-quality security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "shreyam1008"
date-released: "2026-10-02"
url: "https://skillstore.io/skills/shreyam1008-code-quality/audits/1"
identifiers:
  - type: other
    value: "skillstore:shreyam1008-code-quality:audit:1"
    description: "Skillstore immutable audit report identifier"

比较变体

2 个可安装变体

每位作者的技能都保持为独立的可安装项。推荐变体按 Skillstore 证据排序。

为什么此变体排名第一

证据置信度更高

作者 / 来源 Skillstore 评分证据置信度 Skillstore 使用量已更新

CrazySwami 推荐

crazyswami-code-quality

Skillstore 评分 78

证据置信度高

Skillstore 使用量 7

已更新

2026-09-09

shreyam1008 当前

shreyam1008-code-quality

Skillstore 评分 78

证据置信度中

Skillstore 使用量 2

已更新

2026-10-04

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Review a Feature Change

Check changed code for failure paths, boundary conditions, and broken public contracts before merging.

Simplify Legacy Logic

Trace tangled behavior and remove unnecessary branches or indirection only when callers and tests justify the change.

Investigate Asynchronous Failures

Review state ownership, retries, cancellation, and partial writes to identify inconsistent transitions and meaningful regression tests.

试试这些提示

Review One Function

Review [function or file] for correctness and readability. Trace one representative input and report actionable findings with consequences and locations.

Simplify a Module

Simplify [module] while preserving its public contract and error behavior. Check callers, use existing repository conventions, and validate changed behavior with relevant tests.

Evaluate Dependency Removal

Evaluate removing [dependency or abstraction]. Identify callers, compare replacement behavior and maintenance cost, and propose a focused patch only when evidence supports removal.

Review Concurrent State Changes

Review [workflow] for retries, cancellation, stale results, and partial writes. Trace state transitions, preserve security checks, and reproduce failures before proposing tested fixes.

最佳实践

Provide the requested change, relevant callers, public contracts, and existing tests before starting a review.
Reproduce reported failures when feasible and validate meaningful failure paths after making changes.
Keep changes focused and preserve security checks, accessibility, compatibility, and error recovery.

避免

Treating a smaller line count as proof of correctness or maintainability.
Removing abstractions or dependencies without checking callers and behavior contracts.
Combining unrelated cleanup with a focused fix or compressing readable logic into clever expressions.

常见问题

When should I use this skill?

Use it for requested code reviews, refactors, dependency cleanup, or investigation of tangled logic. It is not a default checklist for every small edit.

Does this skill include an automated analyzer?

No. It contains review and simplification instructions, with no executable analyzer or bundled scripts.

Will it always remove abstractions?

No. It preserves abstractions that express real boundaries, ownership rules, testing needs, or variation.

How does it handle testing?

It guides appropriate checks, failure reproduction when feasible, and behavior-level tests covering meaningful failure paths.

Can it replace a dedicated security review?

No. It includes sensitive-path checks but directs security-focused work to a security-specific review.

Does it require a fixed report format?

No. Reviews prioritize actionable findings with consequences and locations. Edit reports summarize simplification, preserved behavior, validation, and remaining tradeoffs.

开发者详情

作者

shreyam1008

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/shreyam1008/shre-skills/tree/ba9787f41c2fe1be1062eeb6322bc339a1026383/skills/code-quality

引用

bbec03cf10354f3aaccd6dd24eda4ac9ceeceac5

维护新鲜度

2026/10/2

使用量

0 次下载 · 0 次浏览

文件结构

📄 SKILL.md