スキル review-agent
📦

review-agent

コンテンツリビジョン r1 安全 ⚙️ 外部コマンド

Review Code Changes for Actionable Defects

Code changes can introduce defects that broad summaries or style checks miss. This skill performs a read-only review and reports concrete findings by priority.

対応: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 78 ブロンズ

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト
Review the Skillstore skill "review-agent" from https://skillstore.io/skills/review-agent.md and its manifest at https://skillstore.io/api/skills/review-agent/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/review-agent.md 署名済み manifest GET /api/skills/review-agent/manifest 署名済み lockfile GET /api/skills/review-agent/lockfile

テストする

「review-agent」を使用しています。 Review the current uncommitted authentication changes.

期待される結果:

  • P1: Preserve token expiry validation in the refresh path. The changed branch accepts expired refresh tokens when cached metadata is missing.
  • Overall assessment: The authentication change has one urgent correctness and security defect. Add coverage for expired tokens without cached metadata.

「review-agent」を使用しています。 Review commit 4f28c91 for actionable defects.

期待される結果:

No findings. The reviewed change preserves existing behavior, and the relevant tests cover the modified paths.

「review-agent」を使用しています。 Review the feature branch against its base branch.

期待される結果:

  • P2: Restore pagination after filtered results. The new filter resets the cursor but does not request the next page.
  • Overall assessment: The branch has one user-visible pagination regression. Add a test that combines filtering with multiple result pages.

セキュリティ監査

安全
v1 • 2026/8/17 バージョン別レポートを開く

One static finding is confirmed because the skill directs the agent to run read-only Git commands. Seven findings are false positives caused by Markdown backticks around filenames, labels, and example text.

2
スキャンされたファイル
65
解析済み行数
1
レビュー項目
0
誤検知を無視
機能レビュー項目 (1)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

中
SKILL.md:24
Ruby/shell backtick execution
`git merge-base HEAD <comparison-ref>`, then inspect `git diff <merge-base-sha>`. If the local
The skill explicitly directs the agent to run git merge-base and git diff. These are intended read-only external commands.

リスク要因

⚙️ 外部コマンド (8)
SKILL.md:14 SKILL.md:24 SKILL.md:43 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:55
監査者: codex
このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く
セキュリティ評価

レポートリンクをコピー

https://skillstore.io/skills/review-agent/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/review-agent/security.svg)](https://skillstore.io/skills/review-agent?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/review-agent?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/review-agent/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/review-agent.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学術引用 (APA · BibTeX · CFF)

APA形式の引用

openai. (2026). review-agent security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/review-agent/audits/1

BibTeX形式の引用

@techreport{openai-review-agent-2026, author = {openai}, title = {review-agent security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/review-agent/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "review-agent security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "openai" date-released: "2026-08-17" url: "https://skillstore.io/skills/review-agent/audits/1" identifiers: - type: other value: "skillstore:review-agent:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由 証拠の信頼度: 中
55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠

作成できるもの

Check Work Before Commit

Review local changes for regressions before creating a commit or requesting peer review.

Assess a Branch Difference

Compare a feature branch with its merge base and identify defects that would enter the target branch.

Support Release Validation

Review a selected commit for release blockers, urgent defects, and material test gaps.

これらのプロンプトを試す

Review Local Changes 
Review my uncommitted changes. Report only concrete defects introduced by the diff, ordered by priority.
Review a Commit 
Review commit [commit SHA]. Check surrounding code, tests, and call sites. Cite the smallest relevant changed lines.
Review Against a Base Branch 
Review the changes that would merge into [base branch]. Use the merge base and report actionable regressions with priority labels.
Run a Targeted Security Review 
Review [target] for security and correctness regressions. Trace affected call paths, verify tests, and explain each demonstrated failure scenario.

ベストプラクティス

  • Specify the exact commit, branch, or uncommitted change set to review.
  • Provide relevant acceptance criteria when intentional behavior changes may resemble regressions.
  • Keep tests and repository history available so the agent can verify findings.

回避

  • Do not ask the skill to fix code or create commits because its workflow is read-only.
  • Do not request style feedback when no meaningful correctness or maintainability impact exists.
  • Do not treat the review as a substitute for tests, runtime validation, or human approval.

よくある質問

What changes can this skill review?
It can review uncommitted changes, a selected commit, a base-branch difference, or another clearly defined target.
Does the skill edit my repository?
No. It is instructed not to modify files, create commits, push branches, or post review comments.
How are findings prioritized?
Findings use P0 for critical blockers, P1 for urgent defects, P2 for ordinary defects, and P3 for low-impact issues.
Will it report style issues?
It excludes style concerns unless they create a meaningful maintainability problem or obscure the code.
What happens when no defects are found?
The skill states that no findings were found and adds a brief assessment of remaining test gaps or risks.
Does a clean review prove the change is correct?
No. Results depend on available context and cannot guarantee detection of every defect or runtime condition.

開発者情報

作成者

openai

ライセンス

MIT

Skillstore リビジョン

r1

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/openai/codex/tree/e38290846c11424567c9c8226f2be8a2886c5929/codex-rs/skills/src/assets/samples/review-agent

参照

bc37f12c64ad89ca965c1e90d44012af0469ec4e

メンテナンスの新しさ

2026/8/17

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

📁 agents/

📄 openai.yaml

📄 SKILL.md

openai のその他のスキル

すべて表示

関連スキル

すべて表示