메뉴
Use when reviewing Widget Workshop component packages, manifests, settings, Host API usage, permissions, localization, preview assets, security, graceful degradation, or Workshop-readiness.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
Use when working with Widget Workshop Host API calls, permission categories, manifest.json, settings schemas, package categories, validation contracts, or runtime API errors.
Use when creating or editing Widget Workshop component source folders, manifest.json, index.html, settings files, locale files, preview assets, styling, or runtime component code.
Use when routing Widget Workshop component creation, API, validation, troubleshooting, review, publishing-prep, or plugin maintenance tasks.
SOC 직업 분류 기준
| name | widget-workshop-code-review |
| description | Use when reviewing Widget Workshop component packages, manifests, settings, Host API usage, permissions, localization, preview assets, security, graceful degradation, or Workshop-readiness. |
Review component packages against the public Widget Workshop contract and the redesigned creator-facing docs. Lead with concrete bugs and release blockers, not preferences.
scripts/Test-ComponentPackage.ps1 against the component source folder, not an installed runtime copy.manifest.json for identity, preview, window size, categories, permissions, locales, and hasCustomSettings.scripts/settings.json and every field-level default.window.widgetWorkshop and compare calls to contracts/host-api.d.ts.locales.enable behavior: disabled or missing locales keep text in index.html; enabled locales require matching files and title fallback.host.getPermissionGrants() or try/catch.Start with findings ordered by severity. Include the file path, the violated contract, and the user-visible impact. If no issues are found, say so and list any verification gaps.
Use this shape:
Findings
- [P1] path:line - Problem and impact.
Open Questions
- Any unresolved product or contract decision.
Verification
- Command run and result.
manifest.json has no removed fields and no unsupported paths.categories and permissions use accepted keys and no duplicates.fetch, files, shell, clipboard, system, screen, process, theme, and power usage is justified by component behavior.files.*, not raw paths.