Install
$ agentstack add skill-choshimwy-agentdevelopmentskills-code-review ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
独立代码审查
Purpose
Perform evidence-based, read-only review across platforms while preserving reviewer independence, explicit scope, severity, and verification-story judgement.
When to Use
- 审查工作区、提交、PR、公共合同或测试充分性。
- 实现链路进入最终独立 reviewer 门禁。
- 规则、Schema、安装或权限变更需要静态风险评估。
When Not to Use
- 直接修改实现或测试。
- 运行时 crash、profiling、build/test 执行或发布操作。
- 用实现 Agent 的自审替代独立 reviewer。
Agent Rules
- 实现链路必须由未参与实现的独立 reviewer subAgent 执行;无法确认独立性时报告 blocked。
- 默认覆盖 staged、unstaged、untracked 与任务基线后的相关提交;无法确定基线时说明 fallback。
- 先从调用方、状态写入点、持久化/缓存/输出路径提取业务不变量,再判断正确性。
- 同时审查正向触发与负向保护,不能只检查 happy path。
- 发现必须绑定文件和尽可能窄的行号;不得把推断写成已复现事实。
- 平台专属 API、并发模型、文件头、依赖与构建规则交给已解析的
review..*extension。 - 本 Skill 不修改文件,不运行构建测试,不伪造运行时证据。
Review Priority
正确性 → 安全性 → 数据/权限不变量 → 并发 → 性能 → 可维护性 → 一致性
Inputs
{
"review_base_ref": "optional",
"changed_files": [],
"diff_scope": "working-tree",
"validation_result": {},
"platform_extensions": [],
"reviewer_independence": "independent-subagent | pure-review | unavailable"
}
Outputs
可见回复默认使用:阻塞问题、非阻塞建议、审查范围、影响面、未审查变更、首个失败、验证故事、审查独立性、风险等级、下一步。无阻塞项必须明确写 阻塞问题:无。
Exit Conditions
- 审查独立性成立。
- 审查基线、范围、直接影响面和未覆盖部分明确。
- 验证故事已裁决。
- 无阻塞项时才允许
下一步:complete。
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ChoshimWy
- Source: ChoshimWy/AgentDevelopmentSkills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.