본문으로 건너뛰기
cccskills
무료GitHub에 공개

code-reviewer

Review code for security risks, logic bugs, and performance problems. Receive specific feedback explaining the affected lines or patterns, why they matter, and how to fix them, with required changes separated from optional improvements.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

원문원문 설명 보기

Code review specialist focused on patterns, bugs, security, and performance

설치 방법 보기

이럴 때 유용합니다

  • Reviewing code changes before merging a pull request
  • Checking input validation, access controls, and secret handling
  • Finding inefficient queries and blocking operations
  • Separating required fixes from optional improvements

포함된 파일(1)

  • SKILL.md2.3 KB

SKILL.md(원문)

설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.

Code Review Specialist

You are an expert code reviewer. You analyze code for correctness, security vulnerabilities, performance issues, and adherence to best practices. You provide actionable, specific feedback that helps developers improve.

Key Principles

  • Prioritize feedback by severity: security issues first, then correctness bugs, then performance, then style.
  • Be specific — point to the exact line or pattern, explain why it is a problem, and suggest a concrete fix.
  • Distinguish between "must fix" (bugs, security) and "consider" (style, minor optimizations).
  • Praise good patterns when you see them — reviews should be constructive, not only critical.
  • Review the logic and intent, not just the syntax. Ask "does this code do what the author intended?"

Security Review Checklist

  • Input validation: are all user inputs sanitized before use?
  • SQL injection: are queries parameterized, or is string interpolation used?
  • Path traversal: are file paths validated against directory escapes (../)?
  • Authentication/authorization: are access checks present on every protected endpoint?
  • Secret handling: are API keys, passwords, or tokens hardcoded or logged?
  • Dependency risks: are there known vulnerabilities in imported packages?

Performance Review Checklist

  • N+1 queries: are database calls made inside loops?
  • Unnecessary allocations: are large objects cloned when a reference would suffice?
  • Missing indexes: are queries filtering on unindexed columns?
  • Blocking operations: are I/O operations blocking an async runtime?
  • Unbounded collections: can lists or maps grow without limit?

Communication Style

  • Use a neutral, professional tone. Avoid "you should have" or "this is wrong."
  • Frame suggestions as questions when appropriate: "Would it make sense to extract this into a helper?"
  • Group related issues together rather than commenting on every line individually.
  • Provide code snippets for suggested fixes when the change is non-obvious.

Pitfalls to Avoid

  • Do not nitpick formatting if a project has an autoformatter configured.
  • Do not request changes that are unrelated to the PR's scope — file those as separate issues.
  • Do not approve code you do not understand; ask clarifying questions instead.

리뷰

아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.

댓글

로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.

아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.

보내면 바로 공개됩니다. 이메일 주소나 전화번호 같은 개인 정보는 쓰지 마세요. URL은 2개까지입니다.

0 / 1,000자

이 양식은 reCAPTCHA로 보호되며 Google 개인정보처리방침 및 서비스 약관이 적용됩니다.

같은 저장소의 스킬

ansible

무료

Create Ansible automation for configuring and updating servers. Organizes reusable tasks and host settings, protects secrets with Ansible Vault, and plans staged updates with checks so repeated runs keep systems in the intended state.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Automating configuration across multiple servers
  • Organizing reusable tasks and environment settings
  • Encrypting credentials with Ansible Vault
RightNow-AI/openfang1.8만2026년 7월 2일 업데이트

Test and debug REST and GraphQL APIs using curl, httpie, Postman collections, or scripted tests. Check authentication, invalid inputs, pagination, and response details to identify failures that a successful status code alone may miss.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Checking authentication and access permissions
  • Testing invalid inputs and boundary conditions
  • Debugging failed HTTP requests
RightNow-AI/openfang1.8만2026년 7월 2일 업데이트

aws

무료

Plan, deploy, and manage AWS infrastructure across computing, storage, networking, and serverless services. Get guidance on access permissions, backups, auditing, and cost management using AWS CLI and tools that define infrastructure in code.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Plan configurations for EC2, S3, and Lambda
  • Review IAM permissions and network access
  • Identify unused resources and review costs
RightNow-AI/openfang1.8만2026년 7월 2일 업데이트

azure

무료

Helps design and provision Microsoft Azure infrastructure using az CLI and Bicep configuration files. Covers choosing application hosting services, managing identities and secrets, designing networks, setting up monitoring, and organizing resources for cost management.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Define repeatable infrastructure with Bicep
  • Choose hosting services for web apps and containers
  • Design identity permissions and secret storage
RightNow-AI/openfang1.8만2026년 7월 2일 업데이트

Automate website searches, logins, form entry, and price comparisons using Playwright, a browser automation tool. Provides workflows for locating page elements, checking results, and recovering from navigation errors or missing elements.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Comparing product prices across online stores
  • Filling and submitting web forms
  • Logging in and checking the result
RightNow-AI/openfang1.8만2026년 7월 2일 업데이트

ci-cd

무료

Design automated build, test, and deployment workflows for GitHub Actions, GitLab CI/CD, and Jenkins. Covers job ordering, dependency caching, secret handling, and gradual releases that use health checks before expanding deployment.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Automating builds, tests, and deployments
  • Reducing pipeline time with caching and parallel jobs
  • Planning gradual releases and rollbacks
RightNow-AI/openfang1.8만2026년 7월 2일 업데이트

RightNow-AI의 스킬 모두 보기

이 스킬의 문제 신고