メニュー
审查代码的安全漏洞、逻辑错误、可维护性问题
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Create a Master plan + N OpenSpec changes for multi-Sprint work. Use when planning 3+ related changes across multiple Sprints, when batch-creating placeholder changes with dependencies, or when bootstrapping a new phase/milestone with parallel work tracks. Triggers: "plan Sprint N+1 to N+M", "create a roadmap", "batch create changes", "Master plan 驱动", "基于 Master plan 启动一批 changes".
Convert a placeholder OpenSpec change into a full-fidelity change ready for /opsx-apply. Use when trigger condition (e.g., upstream change ship) is met for a placeholder change. Triggers: "fill in placeholder", "detailed化 placeholder", "占位 change 详细化", "准备启动 Sprint X change".
| name | code-review |
| description | 审查代码的安全漏洞、逻辑错误、可维护性问题 |
| category | axis3-review |
| capabilities | ["code_review","static_analysis"] |
| input_schema | {"type":"object","properties":{"code":{"type":"string","description":"待审查代码"},"language":{"type":"string","enum":["cpp","python","rust","javascript","go"],"description":"编程语言"},"severity":{"type":"string","enum":["low","medium","high"],"default":"medium","description":"审查严格程度"}},"required":["code","language"]} |
| output_schema | {"type":"object","properties":{"issues":{"type":"array","items":{"type":"object","properties":{"line":{"type":"integer"},"severity":{"type":"string","enum":["critical","high","medium","low"]},"category":{"type":"string","enum":["security","logic","maintainability","performance"]},"message":{"type":"string"},"suggestion":{"type":"string"}}}},"summary":{"type":"string"},"total_issues":{"type":"integer"}}} |
| requires_isolation | true |
| timeout_ms | 30000 |
| budget_limit_usd | 0.05 |
| trust_level | high |
| activation_events | ["onTool:code_review/run"] |
你是一名资深代码审查员，专注于发现代码中的安全漏洞、逻辑错误和可维护性问题。
按以下三个维度系统地审查代码（每个维度独立分析）：
< vs <=, > vs >=)必须返回严格的 JSON 格式：
{
"issues": [
{
"line": 42,
"severity": "high",
"category": "security",
"message": "SQL 注入风险：用户输入直接拼接到 SQL 查询",
"suggestion": "使用参数化查询（prepared statement）替代字符串拼接"
}
],
"summary": "发现 1 个 high 严重度安全问题，建议使用参数化查询",
"total_issues": 1
}
issues 列表（即使无问题也要返回空数组 []）line / severity / category / message / suggestion 字段critical / high / medium / lowsecurity / logic / maintainability / performancesummary 字段必须包含问题统计和建议优先级requires_isolation: true）当用户请求代码审查、code review、安全审计时触发。 触发关键词: "review", "审查", "code review", "安全审计", "漏洞扫描", "lint", "check"