asiaostrich/review
.claude/skills/code-review-assistant/SKILL.md
[UDS] 使用標準化檢查清單執行系統性程式碼審查
$ install --global
skillsauthnpx skillsauth add asiaostrich/universal-dev-standards reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 3, 2026, 10:50 AM52.6s4 files scanned
SKILL.md
- source:
- ../../../../skills/code-review-assistant/SKILL.md
- source_version:
- 1.0.0
- translation_version:
- 1.0.0
- last_synced:
- 2026-02-10
- status:
- current
- description:
- [UDS] 使用標準化檢查清單執行系統性程式碼審查
- name:
- review
- allowed-tools:
- Read, Grep, Glob, Bash(git diff:*), Bash(git log:*), Bash(git show:*)
- scope:
- universal
- argument-hint:
- [file path or branch | 檔案路徑或分支名稱]
- disable-model-invocation:
- true
程式碼審查助手
語言: English | 繁體中文
使用標準化的檢查清單和評論前綴，執行系統性的程式碼審查。
工作流程
- 識別變更 - 透過
git diff或git show取得待審查檔案的差異 - 套用檢查清單 - 系統性地檢查每個審查類別
- 產生報告 - 使用標準評論前綴輸出發現
- 總結 - 提供整體評估和建議的後續行動
審查類別
- 功能性 - 功能是否正確？ | Does it work correctly?
- 設計 - 架構是否合適？ | Is the architecture appropriate?
- 品質 - 程式碼是否乾淨可維護？ | Is the code clean and maintainable?
- 可讀性 - 是否容易理解？ | Is it easy to understand?
- 測試 - 測試覆蓋是否足夠？ | Is there adequate test coverage?
- 安全性 - 是否有安全漏洞？ | Are there any vulnerabilities?
- 效能 - 是否有效率？ | Is it efficient?
- 錯誤處理 - 錯誤處理是否妥當？ | Are errors handled properly?
評論前綴
| 前綴 | 意義 | 動作 | Action | |------|------|------|--------| | BLOCKING | 必須在合併前修復 | 必須修復 | Required | | IMPORTANT | 應該修復 | 建議修復 | Recommended | | SUGGESTION | 錦上添花 | 可選改善 | Optional | | QUESTION | 需要說明 | 需要討論 | Discuss | | NOTE | 資訊性 | 僅供參考 | FYI |
使用方式
/review- 審查目前分支的所有變更/review src/auth.js- 審查特定檔案/review feature/login- 審查特定分支
下一步引導
/review 完成後，AI 助手應建議：
程式碼審查完成。建議下一步：
- 有 ❗ BLOCKING 項目 → 修復後重新執行
/review- 全部通過 → 執行
/checkin品質關卡- 僅有 💡 SUGGESTION → 執行
/commit提交變更- 審查中發現規範不實用或缺失 → 執行
/audit --report回報
參考
- 詳細指南：guide.md
- 核心規範：code-review-checklist.md
Related Skills
asiaostrich/sweep
development
VerifiedTrustedCommunity
[UDS] 扫描代码库的调试残留与代码质量问题；可自动修正安全模式。 Use when: before committing, during PR review, or periodic codebase cleanup. Keywords: sweep, debug cleanup, console.log, debugger, TODO, ts-any, code quality, 扫描, 清理.
69SKILL.mdUpdated Jun 4, 2026
asiaostrich/spec-derive
tools
VerifiedTrustedCommunity
[UDS] 从规格衍生 BDD 场景、TDD 骨架或 ATDD 表格
69SKILL.mdUpdated Jun 4, 2026
asiaostrich/skill-builder
development
VerifiedTrustedCommunity
[UDS] 识别重复流程并以正确的开发深度构建 Skill
69SKILL.mdUpdated Jun 4, 2026
asiaostrich/push
tools
VerifiedTrustedCommunity
[UDS] AI 辅助 git push 安全层：质量门禁 + 协作护栏。 Use when: pushing commits, force pushing, pushing to protected branches, pushing feature branches. Keywords: git push, force push, protected branch, quality gate, push receipt, PR automation, 推送, 保护分支, 质量门禁.
69SKILL.mdUpdated Jun 4, 2026