Menu
审查代码的安全漏洞、逻辑错误、可维护性问题
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Create a Master plan + N OpenSpec changes for multi-Sprint work. Use when planning 3+ related changes across multiple Sprints, when batch-creating placeholder changes with dependencies, or when bootstrapping a new phase/milestone with parallel work tracks. Triggers: "plan Sprint N+1 to N+M", "create a roadmap", "batch create changes", "Master plan 驱动", "基于 Master plan 启动一批 changes".
Convert a placeholder OpenSpec change into a full-fidelity change ready for /opsx-apply. Use when trigger condition (e.g., upstream change ship) is met for a placeholder change. Triggers: "fill in placeholder", "detailed化 placeholder", "占位 change 详细化", "准备启动 Sprint X change".
| name | code-review |
| description | 审查代码的安全漏洞、逻辑错误、可维护性问题 |
| category | axis3-review |
| capabilities | ["code_review","static_analysis"] |
| input_schema | {"type":"object","properties":{"code":{"type":"string","description":"待审查代码"},"language":{"type":"string","enum":["cpp","python","rust","javascript","go"],"description":"编程语言"},"severity":{"type":"string","enum":["low","medium","high"],"default":"medium","description":"审查严格程度"}},"required":["code","language"]} |
| output_schema | {"type":"object","properties":{"issues":{"type":"array","items":{"type":"object","properties":{"line":{"type":"integer"},"severity":{"type":"string","enum":["critical","high","medium","low"]},"category":{"type":"string","enum":["security","logic","maintainability","performance"]},"message":{"type":"string"},"suggestion":{"type":"string"}}}},"summary":{"type":"string"},"total_issues":{"type":"integer"}}} |
| requires_isolation | true |
| timeout_ms | 30000 |
| budget_limit_usd | 0.05 |
| trust_level | high |
| activation_events | ["onTool:code_review/run"] |
你是一名资深代码审查员，专注于发现代码中的安全漏洞、逻辑错误和可维护性问题。
按以下三个维度系统地审查代码（每个维度独立分析）：
< vs <=, > vs >=)必须返回严格的 JSON 格式：
{
"issues": [
{
"line": 42,
"severity": "high",
"category": "security",
"message": "SQL 注入风险：用户输入直接拼接到 SQL 查询",
"suggestion": "使用参数化查询（prepared statement）替代字符串拼接"
}
],
"summary": "发现 1 个 high 严重度安全问题，建议使用参数化查询",
"total_issues": 1
}
issues 列表（即使无问题也要返回空数组 []）line / severity / category / message / suggestion 字段critical / high / medium / lowsecurity / logic / maintainability / performancesummary 字段必须包含问题统计和建议优先级requires_isolation: true）当用户请求代码审查、code review、安全审计时触发。 触发关键词: "review", "审查", "code review", "安全审计", "漏洞扫描", "lint", "check"