AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Code Reviewer

skill-huangwb8-skills-code-reviewer · by huangwb8

Use when completing tasks, implementing major features, or before merging to verify work meets requirements - reviews implementation against plan or requirements with severity分级（Critical/Important/Minor）. NO MERGE WITHOUT CODE REVIEW FIRST.

↗ Repository
— No reviews yet
0 installs
28 views
0.0% view→install

Install

$ agentstack add skill-huangwb8-skills-code-reviewer

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-huangwb8-skills-code-reviewer)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● 2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Code Reviewer? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Code Reviewer - 代码审查专家

与 bensz-collect-bugs 的协作约定

  • 因本 skill 设计缺陷导致的 bug，先用 bensz-collect-bugs 规范记录到 ~/.bensz-skills/bugs/，不要直接修改用户本地已安装的 skill 源码；若有 workaround，先记 bug，再继续完成任务。
  • 只有用户明确要求“report bensz skills bugs”等公开上报时，才用本地 gh 上传新增 bug 到 huangwb8/bensz-bugs；不要 pull / clone 整个仓库。

铁律：NO MERGE WITHOUT CODE REVIEW FIRST。

目标：用最少的时间发现“最致命的问题”（安全/正确性/数据一致性/可维护性），并给出可落地的修复建议。

为满足社区推荐的 SKILL.md 500 行以内约束：大量代码示例与长模板已下沉到 awesome-code/agents/code-reviewer/references/legacy-skill-full.md。

何时使用

  • 重大功能完成后、合并前、发布前
  • 大重构/跨模块变更
  • 引入新依赖、新权限、新数据流

审查输入

  • 需求/计划：用户描述、PR 描述、任务计划/设计文档（如 PLAN.md、docs/plans/*.md 或其它项目约定文件名）
  • 代码改动：diff、关键文件、测试结果
  • 风险偏好：可接受的破坏性/性能回退范围

输出格式（必须结构化）

对每个问题输出：

  • Severity：Critical / Important / Minor
  • What：问题是什么（具体到文件/函数/行为）
  • Why：为什么是问题（风险与影响）
  • Fix：如何修（最小变更优先）
  • Verify：如何验证（测试/复现步骤）

审查顺序（先 P0 再 P2）

  1. Critical（P0）
  • 鉴权/授权缺陷、注入、路径遍历、敏感信息泄露
  • 数据一致性/事务边界错误、不可恢复的数据破坏
  1. Important（P1）
  • 明显性能风险（N+1、O(n^2) 热路径、内存爆）
  • 测试覆盖不足（关键路径无回归验证）
  1. Minor（P2）
  • 可维护性：命名、重复、复杂度、模块边界
  • 文档/注释/类型标注缺失

快速检查清单

  • [ ] 输入验证与输出编码是否到位？
  • [ ] 权限校验是否在服务端强制执行？
  • [ ] 是否引入了新的敏感数据写入/日志输出？
  • [ ] 是否有回归测试或至少可复现的验证步骤？
  • [ ] 改动是否严格服务于用户目标，没有无关格式化、顺手重构或过度抽象？
  • [ ] 是否能对应到明确的验收标准；缺少标准时是否已标为阻塞风险？
  • [ ] 是否存在明显的性能/资源泄露风险？

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Agent Skills