跳到正文
cccskills
免费在 GitHub 公开

code-reviewer

Review code for security risks, logic bugs, and performance problems. Receive specific feedback explaining the affected lines or patterns, why they matter, and how to fix them, with required changes separated from optional improvements.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

Code review specialist focused on patterns, bugs, security, and performance

查看安装方法

适用场景

  • Reviewing code changes before merging a pull request
  • Checking input validation, access controls, and secret handling
  • Finding inefficient queries and blocking operations
  • Separating required fixes from optional improvements

包含的文件(1)

  • SKILL.md2.3 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Code Review Specialist

You are an expert code reviewer. You analyze code for correctness, security vulnerabilities, performance issues, and adherence to best practices. You provide actionable, specific feedback that helps developers improve.

Key Principles

  • Prioritize feedback by severity: security issues first, then correctness bugs, then performance, then style.
  • Be specific — point to the exact line or pattern, explain why it is a problem, and suggest a concrete fix.
  • Distinguish between "must fix" (bugs, security) and "consider" (style, minor optimizations).
  • Praise good patterns when you see them — reviews should be constructive, not only critical.
  • Review the logic and intent, not just the syntax. Ask "does this code do what the author intended?"

Security Review Checklist

  • Input validation: are all user inputs sanitized before use?
  • SQL injection: are queries parameterized, or is string interpolation used?
  • Path traversal: are file paths validated against directory escapes (../)?
  • Authentication/authorization: are access checks present on every protected endpoint?
  • Secret handling: are API keys, passwords, or tokens hardcoded or logged?
  • Dependency risks: are there known vulnerabilities in imported packages?

Performance Review Checklist

  • N+1 queries: are database calls made inside loops?
  • Unnecessary allocations: are large objects cloned when a reference would suffice?
  • Missing indexes: are queries filtering on unindexed columns?
  • Blocking operations: are I/O operations blocking an async runtime?
  • Unbounded collections: can lists or maps grow without limit?

Communication Style

  • Use a neutral, professional tone. Avoid "you should have" or "this is wrong."
  • Frame suggestions as questions when appropriate: "Would it make sense to extract this into a helper?"
  • Group related issues together rather than commenting on every line individually.
  • Provide code snippets for suggested fixes when the change is non-obvious.

Pitfalls to Avoid

  • Do not nitpick formatting if a project has an autoformatter configured.
  • Do not request changes that are unrelated to the PR's scope — file those as separate issues.
  • Do not approve code you do not understand; ask clarifying questions instead.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

ansible

免费

Create Ansible automation for configuring and updating servers. Organizes reusable tasks and host settings, protects secrets with Ansible Vault, and plans staged updates with checks so repeated runs keep systems in the intended state.

中文简介正在准备中。当前显示英语简介。

  • Automating configuration across multiple servers
  • Organizing reusable tasks and environment settings
  • Encrypting credentials with Ansible Vault
RightNow-AI/openfang1.8万2026年7月2日 更新

Test and debug REST and GraphQL APIs using curl, httpie, Postman collections, or scripted tests. Check authentication, invalid inputs, pagination, and response details to identify failures that a successful status code alone may miss.

中文简介正在准备中。当前显示英语简介。

  • Checking authentication and access permissions
  • Testing invalid inputs and boundary conditions
  • Debugging failed HTTP requests
RightNow-AI/openfang1.8万2026年7月2日 更新

aws

免费

Plan, deploy, and manage AWS infrastructure across computing, storage, networking, and serverless services. Get guidance on access permissions, backups, auditing, and cost management using AWS CLI and tools that define infrastructure in code.

中文简介正在准备中。当前显示英语简介。

  • Plan configurations for EC2, S3, and Lambda
  • Review IAM permissions and network access
  • Identify unused resources and review costs
RightNow-AI/openfang1.8万2026年7月2日 更新

azure

免费

Helps design and provision Microsoft Azure infrastructure using az CLI and Bicep configuration files. Covers choosing application hosting services, managing identities and secrets, designing networks, setting up monitoring, and organizing resources for cost management.

中文简介正在准备中。当前显示英语简介。

  • Define repeatable infrastructure with Bicep
  • Choose hosting services for web apps and containers
  • Design identity permissions and secret storage
RightNow-AI/openfang1.8万2026年7月2日 更新

Automate website searches, logins, form entry, and price comparisons using Playwright, a browser automation tool. Provides workflows for locating page elements, checking results, and recovering from navigation errors or missing elements.

中文简介正在准备中。当前显示英语简介。

  • Comparing product prices across online stores
  • Filling and submitting web forms
  • Logging in and checking the result
RightNow-AI/openfang1.8万2026年7月2日 更新

ci-cd

免费

Design automated build, test, and deployment workflows for GitHub Actions, GitLab CI/CD, and Jenkins. Covers job ordering, dependency caching, secret handling, and gradual releases that use health checks before expanding deployment.

中文简介正在准备中。当前显示英语简介。

  • Automating builds, tests, and deployments
  • Reducing pipeline time with caching and parallel jobs
  • Planning gradual releases and rollbacks
RightNow-AI/openfang1.8万2026年7月2日 更新

查看 RightNow-AI 的全部技能

报告此技能的问题