— No reviews yet
0 installs
4 views
0.0% view→install
Install
$ agentstack add skill-zuoyebang-aiweave-failure-path-review ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Are you the author of Failure Path Review? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claimAbout
审计 service 方法失败路径覆盖完整性。范围:$ARGUMENTS。
> 公共步骤模板见 [skills-spec/01skillauthoring_guide.md](path) §A-§E。本 Skill 不生成代码。
第 0 步:🚫 模块 + 启用状态检查
- 读
BUILD_STATUS.md§0 —— 命中 🚫 模块跳过 - 读
INDEX.md§0 —— 如docs-spec/21未启用 → 跳过本 Skill
第 1 步:读约束源
按顺序读:
docs/service/transaction_design.md§6 —— 失败路径全景图(ASCII 图 + 分支清单)docs/architecture/cross_service_contract.md§4 —— 故障传播矩阵docs/service/{module}_service.md§4.N.7 —— 单方法的边界情况docs/testing/testing_design.md§4.7 / §5.5 —— 故障注入 framework API + 高级用例 3 类docs/architecture/ai_dev_guide.md§8.2 / §8.9 —— 事务一致性 / 跨服务合约约束总清单
第 2 步:扫描代码范围
按 $ARGUMENTS 确定扫描范围:
- 空:
git diff main..HEAD --name-only取新增/修改的 service / controller 文件 {module}:service/{module}/**/*.go{module}/{Method}:聚焦该方法
第 3 步:5 项审计
审计 1:失败分支提取
对每个被扫描方法,静态分析提取所有"失败返回点":
- 所有 `return ..., err` 或 `return ..., Error{...}` 语句
- 所有 panic / log.Fatal(应该 = 0)
- 所有调用下游 / DB / Redis / MQ 的错误处理路径
每个失败分支命名为 F-N(按代码出现顺序)
审计 2:失败路径文档覆盖
对每个 F-N:
1. 查 transaction_design.md §6 失败路径全景图 是否包含该分支
2. 如涉及下游故障 → 查 cross_service_contract.md §4 故障传播矩阵
3. 文档未覆盖 → 标 🔴 严重(结构性问题:失败路径无据可查)
审计 3:失败分支测试覆盖
对每个 F-N:
1. 在 test/cases/{audience}/{module}_*_test.go 中搜索是否有触发该分支的测试用例
2. 缺失 → 标 🔴 严重(按 PRINCIPLES §8 测试是验收唯一标准)
3. 有 stub 但断言不完整(如只断言 err != nil 而无 errNo / 副作用)→ 标 🟡 待复核
审计 4:故障注入测试覆盖
对涉及下游调用的 F-N:
1. 测试用例是否使用 framework.InjectRedisFailure / InjectMysqlFailure /
InjectKafkaFailure / ForceCircuitOpen 等 §4.7 故障注入 API
2. 仅靠"巧合性测试"(如下游真的失败时)覆盖 → 标 🟡 待复核(不稳定)
审计 5:HOT-PATH 失败路径优先级
对带 [HOT-PATH] 标记的方法的 F-N:
1. 失败路径必须无锁内 IO、无大对象分配(错误对象 🧩 **AIWeave 骨架 · 作者 XuRuibo** · Apache-2.0 · 模板文件,复制到工程后按业务语义填充
## Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- **Author:** [zuoyebang](https://github.com/zuoyebang)
- **Source:** [zuoyebang/aiweave](https://github.com/zuoyebang/aiweave)
- **License:** Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.