SECURITY REVIEW
Not yet assessed
Review the original instructions and requested permissions before installing.
No security review is available for this catalog entry yet.
Use this skill to review code for local changes (staged or working tree) and remote Pull Requests (by ID or URL). Prioritize correctness, security, maintainability, and project standards, then produce structured findings with clear severity and file references.
Review the original instructions and requested permissions before installing.
No security review is available for this catalog entry yet.
How clearly the skill guides your agent, how complete its workflow is, and how you can check the outcome.
No quality assessment is available for this catalog entry yet.
Original instructions from the publisher’s SKILL.md
# Code Reviewer
This skill guides the agent in conducting professional code reviews for both local development and remote Pull Requests.
## Workflow
### 1. Determine Review Target
* **Remote PR**: If the user provides a PR number or URL (e.g., "Review PR #123"), target that remote PR.
* **Local Changes**: If no specific PR is mentioned, or if the user asks to "review my changes", target the current local file system states (staged and unstaged changes).
### 2. Preparation
#### For Remote PRs:
1. **Checkout**: Use the GitHub CLI to checkout the PR.
```bash
gh pr checkout <PR_NUMBER>
```
2. **Preflight**: Execute the project's standard verification suite to catch automated failures early.
```bash
npm run preflight
```
3. **Context**: Read the PR description and any existing comments to understand the goal and history.
#### For Local Changes:
1. **Identify Changes**:
* Check status: `git status`
* Read diffs: `git diff` (working tree) and/or `git diff --staged` (staged).
2. **Preflight (Optional)**: If the changes are substantial, ask the user if they want to run `npm run preflight` before reviewing.
### 3. In-Depth Analysis
Analyze the code changes based on the following pillars:
* **Correctness**: Does the code achieve its stated purpose without bugs or logical errors?
* **Maintainability**: Is the code clean, well-structured, and easy to understand and modify in the future? Consider factors like code clarity, modularity, and adherence to established design patterns.
* **Readability**: Is the code well-commented (where necessary) and consistently formatted according to our project's coding style guidelines?
* **Efficiency**: Are there any obvious performance bottlenecks or resource inefficiencies introduced by the changes?
* **Security**: Are there any potential security vulnerabilities or insecure coding practices?
* **Edge Cases and Error Handling**: Does the code appropriately handle edge cases and potential errors?
* **Testability**: Is the new or modified code adequately covered by tests (even if preflight checks pass)? Suggest additional test cases that would improve coverage or robustness.
### 4. Severity Model
Classify findings using this default severity model unless the repository already defines a stricter review rubric:
* **Critical**: Security issues, data loss risks, correctness bugs, crashes, breaking changes, or severe reliability regressions.
* **Warning**: Maintainability issues, unclear logic, missing edge-case handling, performance concerns, or risky design choices.
* **Suggestion**: Small improvements, readability cleanup, style consistency, or optional best-practice advice.
### 5. Provide Feedback
#### Structure
* List findings first, ordered by severity.
* Every finding should include a file path and a short explanation of why it matters.
* Provide concrete remediation advice when possible.
* After findings, add a short summary or conclusion.
* If no material issues are found, state that explicitly and mention residual risks or test gaps.
#### Recommended Output Shape
* **Findings**:
* **Critical**
* **Warning**
* **Suggestion**
* **Conclusion**: `Approve`, `Warning`, or `Block`
#### Language
* Default to Simplified Chinese for findings, summary, and review rationale.
* Keep code identifiers, commands, file paths, API names, and Git terminology in English.
* If the repository already uses a fixed review template language, follow the repository template first.
#### Tone
* Be constructive, professional, and friendly.
* Explain *why* a change is requested.
* For approvals, acknowledge the specific value of the contribution.
### 6. Reference Material
If you need detailed review checklists, example review phrasing, or security-oriented prompts, read `references/code-reviewer-details.md`.
### 7. Cleanup (Remote PRs only)
* After the review, ask the user if they want to switch back to the default branch (e.g., `main` or `master`).Files included alongside SKILL.md in the publisher’s repository.