asiaostrich/locales/zh-CN/skills/code-review-assistant
locales/zh-CN/skills/code-review-assistant/SKILL.md
使用标准化检查清单执行系统性代码审查。 使用时机：审查代码、PR 审查、代码品质检查。 关键字：review, code review, PR, checklist, 审查, 代码, 品质。
$ install --global
skillsauthnpx skillsauth add asiaostrich/universal-dev-standards locales/zh-CN/skills/code-review-assistantInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 20, 2026, 3:57 AM173.3s4 files scanned
SKILL.md
- source:
- ../../../../skills/code-review-assistant/SKILL.md
- source_version:
- 1.0.0
- translation_version:
- 1.0.0
- last_synced:
- 2026-02-10
- status:
- current
- description:
- |
代码审查助手
语言: English | 简体中文
使用标准化的检查清单和评论前缀，执行系统性的代码审查。
工作流程
- 识别变更 - 通过
git diff或git show取得待审查文件的差异 - 套用检查清单 - 系统性地检查每个审查类别
- 产生报告 - 使用标准评论前缀输出发现
- 总结 - 提供整体评估和建议的后续行动
审查类别
- 功能性 - 功能是否正确？ | Does it work correctly?
- 设计 - 架构是否合适？ | Is the architecture appropriate?
- 品质 - 代码是否干净可维护？ | Is the code clean and maintainable?
- 可读性 - 是否容易理解？ | Is it easy to understand?
- 测试 - 测试覆盖是否足够？ | Is there adequate test coverage?
- 安全性 - 是否有安全漏洞？ | Are there any vulnerabilities?
- 性能 - 是否有效率？ | Is it efficient?
- 错误处理 - 错误处理是否妥当？ | Are errors handled properly?
评论前缀
| 前缀 | 意义 | 动作 | Action | |------|------|------|--------| | BLOCKING | 必须在合并前修复 | 必须修复 | Required | | IMPORTANT | 应该修复 | 建议修复 | Recommended | | SUGGESTION | 锦上添花 | 可选改善 | Optional | | QUESTION | 需要说明 | 需要讨论 | Discuss | | NOTE | 信息性 | 仅供参考 | FYI |
使用方式
/code-review- 审查目前分支的所有变更/code-review src/auth.js- 审查特定文件/code-review feature/login- 审查特定分支
下一步引导
/code-review 完成后，AI 助手应建议：
代码审查完成。建议下一步：
- 有 ❗ BLOCKING 项目 → 修复后重新执行
/code-review- 全部通过 → 执行
/checkin品质关卡- 仅有 💡 SUGGESTION → 执行
/commit提交变更- 审查中发现规范不实用或缺失 → 执行
/audit --report回报
参考
- 详细指南：guide.md
- 核心规范：code-review-checklist.md
Related Skills
asiaostrich/spec-derive
tools
VerifiedTrustedCommunity
[UDS] 從規格衍生 BDD 場景、TDD 骨架或 ATDD 表格
71SKILL.mdUpdated May 30, 2026
asiaostrich/methodology
development
VerifiedTrustedCommunity
[UDS] /methodology: 選擇並追蹤開發方法論（SDD/BDD/TDD）。 Use when: 選擇方法論、切換開發模式、查詢當前方法論狀態。 若要查詢各階段對應指令請用 /dev-workflow。
71SKILL.mdUpdated May 30, 2026
asiaostrich/spec-derive
testing
VerifiedTrustedCommunity
[UDS] Derive BDD scenarios, TDD skeletons, or ATDD tables from specifications
71SKILL.mdUpdated May 4, 2026
asiaostrich/sdd
development
VerifiedTrustedCommunity
[UDS] Create or review specification documents for Spec-Driven Development
71SKILL.mdUpdated Apr 3, 2026