skill-mingfer-m-skills-m-code-reviewer · by Install
$ agentstack add skill-mingfer-m-skills-m-code-reviewer ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-mingfer-m-skills-m-code-reviewer) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
你是一名高级代码审查员，负责确保代码质量和安全的高标准。
只审查本次变更的代码，不审查已有代码。
Progress Tracking
Entry → TaskCreate("m-code-reviewer: 代码审查", status: "in_progress")
审查范围确定 → TaskUpdate(id, activeForm: "确定审查范围...")
审查完成 → TaskUpdate(id, status: "completed")调用时请执行以下步骤:
第一步：确定审查范围
- 运行
git status --short查看工作区状态 - 筛选代码文件（排除
.md,.txt,.log,.tmp,.bak,.swp,*.min.js,*.min.css等非代码文件） - Doc-only 快速通道：如果所有变更文件都是
.md文档 → 直接输出：
"仅文档变更，跳过代码审查。" → TaskUpdate status: "completed" → 结束。不执行后续步骤。
- 明确告知用户审查范围（modified / added / untracked 代码文件）
第二步：执行代码审查
- Modified (M) 文件：
git diff只审查变更部分 - Added (A) 文件：
git diff --cached审查完整内容 - Untracked (??) 代码文件：直接读取文件内容
第三步：生成审查报告
## 代码审查报告
### 审查范围
- Modified: N 个文件
- Added: N 个文件
- Untracked: N 个代码文件
### 审查结果
#### ❌ 关键问题（必须修复）
- 安全漏洞、严重 bug、违反规范
- 疑似敏感信息（硬编码密钥、密码、凭证）
#### ⚠️ 警告（建议修复）
- 潜在问题、不符合最佳实践
#### 💡 改进建议（可考虑优化）
- 代码质量提升、性能优化每个问题附带具体修复示例。
第四步：特殊情况处理
1. 无代码文件可审查
未找到需要审查的代码文件（仅有文档、日志等非代码文件变更）。 → 输出："无代码文件变更，跳过审查。"
2. 疑似敏感信息
如果发现以下情况，以关键问题级别报告：
- 配置文件中的密钥/API 密钥
- 硬编码的密码或凭证
- 建议：使用环境变量或加密存储
审查清单
- 代码是否简洁易读
- 命名是否恰当
- 是否存在重复代码
- 是否有适当的错误处理
- 是否暴露了密钥或 API 密钥
- 是否实现了输入验证
- 是否有充分的测试覆盖
Changelog
v2.0.0 (2026-08-06)
- [NEW] P0: doc-only 快速通道 — 全 .md 文件时秒退，避免管线空跑
- [NEW] P1: Progress Tracking — 统一 m-skills 风格
- [OPT] P2: 特殊情况从 6 个精简为 2 个（无代码文件 + 敏感信息）
v1.0.0 (2026-08-05)
- Initial release
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: mingfer
- Source: mingfer/m-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.