asiaostrich/locales/zh-CN/skills/code-review-assistant
locales/zh-CN/skills/code-review-assistant/SKILL.md
使用标准化检查清单执行系统性代码审查。 使用时机：审查代码、PR 审查、代码品质检查。 关键字：review, code review, PR, checklist, 审查, 代码, 品质。
$ install --global
skillsauthnpx skillsauth add asiaostrich/universal-dev-standards locales/zh-CN/skills/code-review-assistantInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 3, 2026, 10:51 AM5.9s4 files scanned
SKILL.md
- source:
- ../../../../skills/code-review-assistant/SKILL.md
- source_version:
- 1.0.0
- translation_version:
- 1.0.0
- last_synced:
- 2026-02-10
- status:
- current
- description:
- |
代码审查助手
语言: English | 简体中文
使用标准化的检查清单和评论前缀，执行系统性的代码审查。
工作流程
- 识别变更 - 通过
git diff或git show取得待审查文件的差异 - 套用检查清单 - 系统性地检查每个审查类别
- 产生报告 - 使用标准评论前缀输出发现
- 总结 - 提供整体评估和建议的后续行动
审查类别
- 功能性 - 功能是否正确？ | Does it work correctly?
- 设计 - 架构是否合适？ | Is the architecture appropriate?
- 品质 - 代码是否干净可维护？ | Is the code clean and maintainable?
- 可读性 - 是否容易理解？ | Is it easy to understand?
- 测试 - 测试覆盖是否足够？ | Is there adequate test coverage?
- 安全性 - 是否有安全漏洞？ | Are there any vulnerabilities?
- 性能 - 是否有效率？ | Is it efficient?
- 错误处理 - 错误处理是否妥当？ | Are errors handled properly?
评论前缀
| 前缀 | 意义 | 动作 | Action | |------|------|------|--------| | BLOCKING | 必须在合并前修复 | 必须修复 | Required | | IMPORTANT | 应该修复 | 建议修复 | Recommended | | SUGGESTION | 锦上添花 | 可选改善 | Optional | | QUESTION | 需要说明 | 需要讨论 | Discuss | | NOTE | 信息性 | 仅供参考 | FYI |
使用方式
/review- 审查目前分支的所有变更/review src/auth.js- 审查特定文件/review feature/login- 审查特定分支
下一步引导
/review 完成后，AI 助手应建议：
代码审查完成。建议下一步：
- 有 ❗ BLOCKING 项目 → 修复后重新执行
/review- 全部通过 → 执行
/checkin品质关卡- 仅有 💡 SUGGESTION → 执行
/commit提交变更- 审查中发现规范不实用或缺失 → 执行
/audit --report回报
参考
- 详细指南：guide.md
- 核心规范：code-review-checklist.md
Related Skills
asiaostrich/sweep
development
VerifiedTrustedCommunity
[UDS] 扫描代码库的调试残留与代码质量问题；可自动修正安全模式。 Use when: before committing, during PR review, or periodic codebase cleanup. Keywords: sweep, debug cleanup, console.log, debugger, TODO, ts-any, code quality, 扫描, 清理.
69SKILL.mdUpdated Jun 4, 2026
asiaostrich/spec-derive
tools
VerifiedTrustedCommunity
[UDS] 从规格衍生 BDD 场景、TDD 骨架或 ATDD 表格
69SKILL.mdUpdated Jun 4, 2026
asiaostrich/skill-builder
development
VerifiedTrustedCommunity
[UDS] 识别重复流程并以正确的开发深度构建 Skill
69SKILL.mdUpdated Jun 4, 2026
asiaostrich/push
tools
VerifiedTrustedCommunity
[UDS] AI 辅助 git push 安全层：质量门禁 + 协作护栏。 Use when: pushing commits, force pushing, pushing to protected branches, pushing feature branches. Keywords: git push, force push, protected branch, quality gate, push receipt, PR automation, 推送, 保护分支, 质量门禁.
69SKILL.mdUpdated Jun 4, 2026