Install
$ agentstack add skill-stanshy-agenthub-sop-review ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
L1 Code Review SOP
L1 審核任務時,必須依序完成以下所有步驟,不得跳過任何 ⛔ CHECKPOINT。
使用方式
/sop-review
參數
$0: 任務 ID(如T3)
執行步驟
⛔ STEP 1 — 載入任務
找到任務檔案:使用 Glob tool 搜尋 .tasks/**/$0-*.md,若無結果再搜尋 .tasks/**/$0.md,用 Read tool 讀取。
確認並記錄:
- 任務描述與目標
- 驗收標準清單(逐項列出)
- 指派對象(確認是正確的 L2)
- 完工時間(確認事件紀錄有記錄)
> ✋ 確認任務內容清楚後再繼續。
⛔ STEP 2 — 載入審查規範
必讀:
.knowledge/coding-standards.md(或.knowledge/company/standards/coding-standards.md)
依任務類型額外讀取:
| 任務類型 | 必讀規範 | |---------|---------| | 後端 / API | .knowledge/specs/api-design.md + .knowledge/specs/data-model.md | | 前端 / UI | .knowledge/specs/feature-spec.md | | 全端 | 以上全部 |
輸出:
📋 審查規範載入完成
- coding-standards ✅
- [對應規範] ✅
審查重點(從規範中提取):
- [與本任務相關的規範條目]
> ✋ 確認規範已讀、審查重點已列出後再繼續。
⛔ STEP 2.5 — 取得變更範圍(Git Diff)
讀取任務檔的 | 並行組 | 欄位:
若並行任務(並行組 = A/B/C...):
- 先同步最新 sprint:
``bash git checkout task/s{N}-$0-{slug} git merge sprint-{N} `` 若有衝突 → 停止,通知 L2 解決衝突後重新提交
- 取得 diff:
``bash git diff sprint-{N}...task/s{N}-$0-{slug} ` 輸出: ` 📂 本次變更範圍(並行任務) 異動檔案:[列出] 新增行數:N | 刪除行數:N ``
若循序任務(並行組 = —):
git show HEAD
輸出:
📂 本次變更範圍(循序任務,最新 commit)
Commit:{hash} {message}
異動檔案:[列出]
> 以此 diff / show 結果作為 STEP 3 Review 的主要審查依據。
> ✋ 確認已取得變更範圍後再繼續。
⛔ STEP 3 — 執行 Code Review
執行 /review(讀取 .claude/commands/review.md 並依步驟執行)
Review 必須逐項對照:
- 驗收標準 — 每個
- [x]是否確實完成 - 規範條目 — 程式碼是否符合已載入的規範
- postmortem 地雷 — 是否有重蹈覆轍
> ✋ Review 報告完成後再繼續。
⛔ STEP 4 — 審核決策
通過 — 所有驗收標準與規範均符合: → 執行 /task-approve $0 {備註}(讀取 .claude/commands/task-approve.md)
退回 — 有不符合項目: → 執行 /task-status $0 rejected {具體說明哪些項目不通過、需要修改什麼} → 通知 L2 重新執行 /sop-execute $0
> ✋ 決策必須明確,不得含糊帶過。
STEP 5 — 輸出審核結果
[✅ 通過 / ❌ 退回] $0 審核完成
審核結果:[通過 / 退回]
驗收標準對照:[全部通過 / {列出未通過項目}]
規範對照:[符合 / {列出違規項目}]
備註:{說明}
[若通過] 下一步:PM 執行 /pm-review
[若退回] 下一步:L2 修正後重新執行 /sop-execute $0
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Stanshy
- Source: Stanshy/AgentHub
- License: MIT
- Homepage: https://agenthub.stanshy.com/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.