asiaostrich/code-review
skills/code-review-assistant/SKILL.md
[UDS] Perform systematic code review with checklist
$ install --global
skillsauthnpx skillsauth add asiaostrich/universal-dev-standards code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 20, 2026, 4:00 AM24.2s4 files scanned
SKILL.md
- name:
- code-review
- scope:
- universal
- description:
- [UDS] Perform systematic code review with checklist
- allowed-tools:
- Read, Grep, Glob, Bash(git diff:*), Bash(git log:*), Bash(git show:*)
- argument-hint:
- [file path or branch | 檔案路徑或分支名稱]
- disable-model-invocation:
- true
- status:
- reference
<!-- DEPRECATION NOTICE (XSPEC-086 Phase 4, 2026-04-28):
Code review workflow orchestration (4-step sequence, outcome gating) relocated to adoption layer
(XSPEC-095, 2026-04-28). This Skill retains: 8 review category definitions,
BLOCKING/IMPORTANT/SUGGESTION/QUESTION/NOTE prefix semantics.
For enforced execution, use your adoption layer's toolchain.
-->
Code Review Assistant | 程式碼審查助手
⚠️ Status: Reference（參考用，非可執行流程） — 程式碼審查流程協調（4 步驟序列、outcome gating）已於 2026-04-28 移至 adoption layer（XSPEC-095）。此處保留 8 大審查類別定義、BLOCKING/IMPORTANT/SUGGESTION/QUESTION/NOTE 前綴語意供參考。 Lifecycle orchestration has moved to the adoption layer (XSPEC-095); this document is reference-only. For enforced execution, use your adoption layer's toolchain.
Perform systematic code review using standardized checklists and comment prefixes.
執行系統性的程式碼審查，使用標準化的檢查清單和評論前綴。
Workflow | 工作流程
📖 以下為流程的參考結構，非可執行步驟；自動化／強制執行請用 adoption layer 工具鏈（XSPEC-095）。 The steps below are a reference structure, not an executable workflow.
- Identify changes - Get diff of files to review via
git difforgit show - Apply checklist - Check each review category systematically
- Generate report - Output findings with standard comment prefixes
- Summarize - Provide overall assessment and recommended actions
Review Categories | 審查類別
- Functionality - Does it work correctly? | 功能是否正確？
- Design - Is the architecture appropriate? | 架構是否合適？
- Quality - Is the code clean and maintainable? | 程式碼是否乾淨可維護？
- Readability - Is it easy to understand? | 是否容易理解？
- Tests - Is there adequate test coverage? | 測試覆蓋是否足夠？
- Security - Are there any vulnerabilities? | 是否有安全漏洞？
- Performance - Is it efficient? | 是否有效率？
- Error Handling - Are errors handled properly? | 錯誤處理是否妥當？
Comment Prefixes | 評論前綴
| Prefix | Meaning | Action | 動作 | |--------|---------|--------|------| | BLOCKING | Must fix before merge | Required | 必須修復 | | IMPORTANT | Should fix | Recommended | 建議修復 | | SUGGESTION | Nice-to-have | Optional | 可選改善 | | QUESTION | Need clarification | Discuss | 需要討論 | | NOTE | Informational | FYI | 僅供參考 |
Usage | 使用方式
/code-review- Review all changes in current branch/code-review src/auth.js- Review specific file/code-review feature/login- Review specific branch
Next Steps Guidance | 下一步引導
After /code-review completes, the AI assistant should suggest:
程式碼審查完成。建議下一步 / Code review complete. Suggested next steps:
- 有 ❗ BLOCKING 項目 → 修復後重新執行
/code-review— Fix issues then re-run/code-review- 全部通過 → 執行
/checkin品質關卡 ⭐ Recommended / 推薦 — All passed → Run/checkinquality gates- 僅有 💡 SUGGESTION → 執行
/commit提交變更 — Only suggestions → Run/commit- 審查中發現規範不實用或缺失 → 執行
/audit --report回報 — Found impractical or missing standards → Run/audit --report
Reference | 參考
- Detailed guide: guide.md
- Core standard: code-review-checklist.md
AI Agent Behavior | AI 代理行為
完整的 AI 行為定義請參閱對應的命令文件：
/code-reviewFor complete AI agent behavior definition, see the corresponding command file:
/code-review
Related Skills
asiaostrich/spec-derive
tools
VerifiedTrustedCommunity
[UDS] 從規格衍生 BDD 場景、TDD 骨架或 ATDD 表格
71SKILL.mdUpdated May 30, 2026
asiaostrich/methodology
development
VerifiedTrustedCommunity
[UDS] /methodology: 選擇並追蹤開發方法論（SDD/BDD/TDD）。 Use when: 選擇方法論、切換開發模式、查詢當前方法論狀態。 若要查詢各階段對應指令請用 /dev-workflow。
71SKILL.mdUpdated May 30, 2026
asiaostrich/spec-derive
testing
VerifiedTrustedCommunity
[UDS] Derive BDD scenarios, TDD skeletons, or ATDD tables from specifications
71SKILL.mdUpdated May 4, 2026
asiaostrich/sdd
development
VerifiedTrustedCommunity
[UDS] Create or review specification documents for Spec-Driven Development
71SKILL.mdUpdated Apr 3, 2026