Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/Nox-Lumen-tech/combo-skills --skill cppcheckThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
本地 agent 的 ragbase 远程客户端：直接查云端知识库（语义检索 / 列文档 / 翻 chunk）、嫁接已有 session 的执行成果，以及向已有 session 派发任务（dispatch）。
L1 本地静态分析。调用 Checkstyle/PMD/SpotBugs/Detekt/Ruff/Bandit/Semgrep/cppcheck/clang-tidy 等工具链对代码做客观检测，输出 CodeEvidence JSON。支持 git diff、指定路径、--all 全量扫描三档。 触发词：静态分析、lint、跑检查工具、scan code、全量扫描、run linter、检查代码规范、安全扫描、跑 semgrep、检查漏洞、从头审、全分支审。 不触发：当用户说"review this PR"/"review before merge"/"is this safe?"时，走 code-review skill（LLM 主观审查）。 适用：需要对照需求文档/知识库的深度审核 → 先本地 L1 全量出 CodeEvidence → 上传云端 L2（详见 references/cloud-api-reference.md 的 "全量 + L2 组合"）。 与 code-review 的关系：code-review = LLM 主观评审（含 diff/全分支三种场景），static-analysis = 工具客观检测（需安装工具）。两者互补，可串联使用。
企业级代码审核核心。对照需求文档/设计文档/编码规范/Bug 历史做 L2 理解性审核。 不做静态检查（那是各语言 Skill D1-D10 的事），只做需要 LLM + 知识库才能做到的深度审核。
Based on SOC occupation classification
Showing SKILL.md
| name | cppcheck |
| description | C/C++ Bug 检测，内存泄漏/空指针/数组越界/未定义行为，无需编译 |
| execution_mode | sandbox |
| metadata | {"language":["c","cpp"],"upstream":{"repo":"https://github.com/danmar/cppcheck","stars":6600,"since":2007,"license":"GPL-3.0","latest":"2.20.0 (2026-03)","rules":"700+ checks","commits_12mo":846,"contributors":380,"user_rating":"4.7/5 (OpenHub)","install":"apt install cppcheck","advantage":"不需要编译, 直接分析源码","integrations":["CLion","Eclipse","Jenkins","MegaLinter","reviewdog"]},"rating":{"community":"4/5","rules_richness":"4/5","speed":"4/5","accuracy":"3.5/5","integration":"4/5","overall":"3.9/5 ⭐⭐⭐⭐"}} |
CLI: cppcheck --enable=all --xml --suppress=missingIncludeSystem src/ 2>report.xml
优势: 不需要编译，直接分析源码，适合快速扫描
现有库: apt install cppcheck（danmar/cppcheck，6K stars）。XML 输出，violations-command-line PARSER=CPPCHECK 可转 SARIF。reviewdog 有 reviewdog/action-cppcheck 直接桥接。MegaLinter 已内置。