chen4hao/shc-review
skills/shc-review/SKILL.md
Code Review。Use when the user asks to review code changes, check code quality, or wants a thorough review before committing/merging.
development
Updated Apr 12, 2026
$ install --global
skillsauthnpx skillsauth add chen4hao/shc-skills shc-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 12, 2026, 3:07 AM40.1s1 file scanned
SKILL.md
- name:
- shc-review
- description:
- >
Code Review
觸發條件：使用者要求 review 程式碼變更、檢查品質、或在 commit/merge 前進行審查。 關鍵字：review, code review, 幫我看看, 檢查程式碼, review my changes
流程
- 執行
git diff查看所有未 commit 的變更（若沒有，則 review 最近一次 commit） - 逐檔檢查以下面向：
- 正確性：邏輯是否正確？有無邊界情況遺漏？
- 安全性：是否有 XSS、SQL injection、command injection 等漏洞？
- 效能：有無不必要的迴圈、重複計算、N+1 查詢？
- 可讀性：命名是否清楚？是否過度複雜？
- 一致性：是否符合專案現有的 coding style？
- 以表格列出所有發現，標示嚴重程度（🔴 必修 / 🟡 建議 / 🟢 微調）
- 最後給出整體評價和改善建議
Related Skills
chen4hao/shc-test
development
VerifiedTrustedCommunity
撰寫與執行測試。Use when the user wants to write tests, add test coverage, or run existing tests for specific code.
SKILL.mdUpdated Apr 12, 2026
chen4hao/shc-techdebt
development
VerifiedTrustedCommunity
技術債掃描。Use when the user wants to scan for technical debt, code smells, or quality issues in the codebase.
SKILL.mdUpdated Apr 12, 2026
chen4hao/shc-refactor
development
VerifiedTrustedCommunity
安全重構。Use when the user wants to refactor code safely with a plan-first approach.
SKILL.mdUpdated Apr 12, 2026
chen4hao/shc-git-summary
tools
VerifiedTrustedCommunity
Git 狀態摘要。Use when the user wants a quick overview of the current git repository status.
SKILL.mdUpdated Apr 12, 2026