菜单
Six-dimension structured code review framework. Produces severity-ranked findings (CRITICAL/HIGH/MEDIUM/LOW/INFO) with evidence mapped to AC IDs, and a verdict (APPROVE/REQUEST_CHANGES/NEEDS_DISCUSSION). Used by kopi-reviewer agent.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Playwright-based evidence capture protocol. Produces screenshot + HTML + console proof mapped per AC ID. Used by kopi-validate agent to generate pass/fail evidence for the evidence-manifest.
Converts a Figma frame into a structured intent-package with AC confidence scoring, state matrix enumeration, and JP/VI/EN annotation handling. Used by kopi-figspec agent.
Knowledge harvesting — surface, distil, store, and recall tacit business knowledge. Run the Recall → Codebase-first → Grill → Distil → Confirm loop when a task needs a business fact that is not written down (why "予約" is always "reservation", when a feedback is a CR vs a Bug, which flow touches payments). Invokable by kopi-brse, kopi-implement, and any kopi agent that hits a business-knowledge gap. Writes verified facts to knowledge/.
Assemble accumulated project knowledge + context into a compact, reusable context-pack — for the orchestrator to hand to subagents on fan-out (so each subagent does NOT re-gather), or for any agent/member to re-establish context fast on resume. Complements `harvest` (harvest distils NEW tacit facts into knowledge/; context-pack packages EXISTING context — code, knowledge, glossary, structure). Reads knowledge/INDEX.md + glossary + structural signals; never invents new knowledge.
Cross-repository contract analysis. Identifies downstream impact of changes to shared types, API contracts, or shared utilities. Used by kopi-reviewer in cross-repo pattern and when breaking changes are detected.
Root cause analysis for bugs, incidents, and regressions. Produces a structured RCA with reproduction steps, impact assessment, and recommended minimum fix. Used in bug-triage and hotfix patterns.
| name | code-review |
| description | Six-dimension structured code review framework. Produces severity-ranked findings (CRITICAL/HIGH/MEDIUM/LOW/INFO) with evidence mapped to AC IDs, and a verdict (APPROVE/REQUEST_CHANGES/NEEDS_DISCUSSION). Used by kopi-reviewer agent. |
| license | MIT |
| allowed-tools | ["file-search","mcp__github__authenticate"] |
Six-dimension structured code review framework.
Logic errors against AC criteria, off-by-one, null/undefined handling, race conditions, missing error propagation.
A01 Broken Access Control, A02 Crypto Failures, A03 Injection (SQL/XSS/command), A07 Auth Failures, A09 Logging Failures (no PII in logs).
For each must-priority AC: code implements it + test asserts it. Missing must AC → HIGH finding.
Alt text, ARIA labels, color contrast ≥ 4.5:1, keyboard navigation, focus management.
Business logic changes have unit tests, no mocking implementation details, no arbitrary setTimeout, Given/When/Then test descriptions.
API response shapes match TypeScript interfaces, breaking changes flagged, versioning conventions followed (constitution Article III).
| Severity | Description |
|---|---|
| CRITICAL | Security vulnerability, data corruption risk |
| HIGH | Bug causing wrong AC behavior, missing must AC |
| MEDIUM | Code smell, missing should AC, accessibility gap |
| LOW | Style issue, missing could AC gap |
| INFO | Suggestion only |
**[{severity}]** `{file}:{line}` — {description}
AC: {ac_id if applicable}
Suggestion: {concrete fix}
CRITICAL or HIGH present → REQUEST_CHANGES
MEDIUM only → NEEDS_DISCUSSION
LOW/INFO only or zero → APPROVE
Findings feed artifacts/active/reviewer-report-{taskId}.json under kopi-reviewer. That artifact conforms to contracts/reviewer-report.schema.json and requires artifact_type, artifact_version, task_id, trace_id, verdict, findings, generated_at, generated_by, and generated_by_model.