Skip to content

搜索技能.../

Agent Skill Search Engine

搜索

搜索
分类
职业

关于

关于
隐私政策
服务条款

© 2026 Skills Pool. 保留所有权利。

Review Code | Skills Pool

技能档案

Review Code

Review code changes for quality and correctness. Use when: user wants any review of code changes.

mackeper0 星标2026年4月11日

职业: 软件质量保证分析师与测试人员
分类: 代码质量

技能内容

Review code changes against the stated requirements
Check for bugs, edge cases, and security issues
Verify adherence to project conventions and patterns
Provide clear, actionable feedback

Constraints

DO NOT write or edit code
DO NOT fix issues yourself — report them for the Developer
ONLY read, analyze, and provide feedback

Review checklist:

Copy this checklist and track progress:

1. Understand the context and stated problem
2. Correctness
- 2.1. Implements the required functionality
- 2.2. Handles edge cases and errors
3. Architecture and quality

相关技能

快速安装

Review Code

npx skillvault add mackeper/mackeper-dotfiles-opencode-skills-review-code-skill-md

下载 Skill 打开源码仓库

作者: mackeper
星标: 0
更新时间: 2026年4月11日
职业

本页内容

01Constraints 02

3.1. Dependencies inversion (pass dependencies as parameters)
3.2. No global variables (Constants are fine)
3.3. Project conventions and patterns
3.4. As simple as possible, but no simpler (YAGNI)

4. Tests

4.1. New/modified behaviors are covered by tests
4.2. Tests are clear and maintainable

5. Security

5.1. No API keys, secrets, or sensitive data in code or git
5.3. User input is validated/sanitized
5.4. No sensitive data exposure in logs or error messages
5.5. No OWASP Top 10 vulnerabilities

6. Performance

6.1. No obvious performance issues

Resources

OWASP Top 10 (2025)

A01 - Broken Access Control: Missing authorization, IDOR
A02 - Cryptographic Failures: Weak hashing, insecure RNG
A03 - Injection: SQL, NoSQL, command injection via taint analysis
A04 - Insecure Design: Missing threat modeling
A05 - Security Misconfiguration: Default credentials
A06 - Vulnerable Components: Snyk/Dependabot for CVEs
A07 - Authentication Failures: Weak session management
A08 - Data Integrity Failures: Unsigned JWTs
A09 - Logging Failures: Missing audit logs
A10 - SSRF: Unvalidated user-controlled URLs

Output

Follow the caveman-review skill.

Review checklist:

04OWASP Top 10 (2025)

Openclaw Release Maintainer

Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.

Verify

Use when you want to validate changes before committing, or when you need to check all React contribution requirements.

Flow

Use when you need to run Flow type checking, or when seeing Flow type errors in React code.

自动化工具

Fix

Use when you have lint errors, formatting issues, or before committing code to ensure it passes CI.

Hygiene

Use when making code changes to ensure they pass VS Code's hygiene checks. Covers the pre-commit hook, unicode restrictions, string quoting rules, copyright headers, indentation, formatting, ESLint, and stylelint. Run the hygiene check before declaring work complete.

microsoft184.0k

Add Policy

Use when adding, modifying, or reviewing VS Code configuration policies. Covers the full policy lifecycle from registration to export to platform-specific artifacts. Run on ANY change that adds a `policy:` field to a configuration property.

microsoft184.0k

软件质量保证分析师与测试人员