Adoption

Agent Skills are supported by leading AI development tools.

VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory

echovic/tech-lead/code-review

Name: tech-lead/code-review
Author: echovic

skill/skills/tech-lead/code-review/SKILL.md

npx skillsauth add echovic/boss-skill tech-lead/code-review

Clean

TrivyContainer and dependency vulnerability scanner

Clean

SemgrepStatic code analysis for vulnerabilities

Clean

mcp-scan (Snyk)Model Context Protocol security validation

Skipped

Snyk (dep)Open source security scanning

Skipped

Socket.devSupply chain security analysis

Skipped

VirusTotalMulti-engine malware detection

Skipped

CrowdStrikeAdvanced threat intelligence

Skipped

OSV-ScannerOpen Source Vulnerability database check

Skipped

OWASP Dep-Check

代码审查方法

审查清单

功能正确性

[ ] 代码实现符合需求
[ ] 边界情况处理正确
[ ] 错误处理完善

代码质量

[ ] 命名清晰易懂
[ ] 函数职责单一
[ ] 避免重复代码
[ ] 注释必要且准确

安全性

[ ] 输入验证
[ ] SQL注入防护
[ ] XSS防护
[ ] 认证授权正确

性能

[ ] 无明显性能问题
[ ] 数据库查询优化
[ ] 避免N+1查询

可维护性

[ ] 代码结构清晰
[ ] 易于测试
[ ] 遵循项目规范

echovic/tech-lead/code-review

skill/skills/tech-lead/code-review/SKILL.md

代码审查方法，包含审查清单、常见问题、最佳实践

410 stars

development

Updated May 31, 2026

$ install --global

skillsauth

npx skillsauth add echovic/boss-skill tech-lead/code-review

Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.

Security Scan Results

3 of 9 scanners reported clean

Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.

Scanners Passed

Scanners in report

Clean

TrivyContainer and dependency vulnerability scanner

95%

Clean

SemgrepStatic code analysis for vulnerabilities

95%

Clean

mcp-scan (Snyk)Model Context Protocol security validation

95%

Skipped

Snyk (dep)Open source security scanning

50%

Skipped

Socket.devSupply chain security analysis

50%

Skipped

VirusTotalMulti-engine malware detection

50%

Skipped

CrowdStrikeAdvanced threat intelligence

50%

Skipped

OSV-ScannerOpen Source Vulnerability database check

50%

Skipped

OWASP Dep-Check

50%

Last scanned: May 31, 2026, 3:05 AM176.3s1 file scanned

SKILL.md

name:: tech-lead/code-review
description:: 代码审查方法，包含审查清单、常见问题、最佳实践
version:: 1.0.0
agent:: tech-lead
type:: methodology
user-invocable:: false
agent-invocable:: true

代码审查方法

审查清单

功能正确性

[ ] 代码实现符合需求
[ ] 边界情况处理正确
[ ] 错误处理完善

代码质量

[ ] 命名清晰易懂
[ ] 函数职责单一
[ ] 避免重复代码
[ ] 注释必要且准确

安全性

[ ] 输入验证
[ ] SQL注入防护
[ ] XSS防护
[ ] 认证授权正确

性能

[ ] 无明显性能问题
[ ] 数据库查询优化
[ ] 避免N+1查询

可维护性

[ ] 代码结构清晰
[ ] 易于测试
[ ] 遵循项目规范

Related Skills

echovic/ui-designer/interaction-specification

testing

VerifiedTrustedCommunity

交互规范，定义加载状态、空状态、反馈机制、动效、无障碍等交互细节

410SKILL.mdUpdated May 31, 2026

echovic/ui-designer/interaction-specification

echovic/ui-designer/design-variants

content-media

VerifiedTrustedCommunity

设计变体模式，产出2-3个设计方案及 tradeoff 分析，供用户选择后确定最终方案

410SKILL.mdUpdated May 31, 2026

echovic/ui-designer/design-variants

echovic/ui-designer/design-system

content-media

VerifiedTrustedCommunity

设计系统规范，包含颜色、字体、间距、圆角、阴影、动效等基础设计token

410SKILL.mdUpdated May 31, 2026

echovic/ui-designer/design-system

echovic/ui-designer/component-specification

testing

VerifiedTrustedCommunity

UI组件规范，定义按钮、输入框、卡片等基础组件的变体、尺寸、状态

410SKILL.mdUpdated May 31, 2026

echovic/ui-designer/component-specification

Download

For Claude Desktop. Download once, then upload the file in the app — no terminal needed.

Need help? View full Cowork setup guide →

Install manually

Choose your platform

# Clone the repo
git clone https://github.com/echovic/boss-skill.git

# Copy into Claude Code skills folder (global)
cp -r boss-skill/skill/skills/tech-lead/code-review ~/.claude/skills/

Claude Code Skills — official skills path docs.

Repository

echovic/boss-skill

410 stars

Compatible with

Claude Code

OpenAI Codex CLI

ChatGPT