菜单
Review code for quality, bugs, security, and improvements. Use when self-reviewing before commit, reviewing PRs, or debugging issues.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | code-review |
| description | Review code for quality, bugs, security, and improvements. Use when self-reviewing before commit, reviewing PRs, or debugging issues. |
Systematically review code for quality, bugs, and security.
| Priority | Check |
|---|---|
| 🔴 Critical | Security (no secrets, injection) |
| 🔴 Critical | Correctness (logic, edge cases) |
| 🟡 Important | Performance (N+1, loops) |
| 🟡 Important | Error handling |
| 🟢 Nice-to-have | Readability, DRY, style |
## Code Review: [Name]
### Summary
[Approved / Changes Requested]
### Issues
- 🔴 [file:line] Problem → Suggestion
- 🟡 [file:line] Problem → Suggestion
### Good Patterns 👍
- [What was done well]
# 🔴 Security
password = "hardcoded" # Bad
password = os.environ["PASS"] # Good
# 🔴 SQL Injection
f"SELECT * WHERE id={id}" # Bad
"SELECT * WHERE id=%s", (id,) # Good
Commit code changes with well-structured messages following Conventional Commits. Use when ready to commit after implementation or bug fix.
Create design documents for features or systems. Use when architecture planning, API design, or technical decisions are needed before implementation.
Record lessons learned and experiences for future reference. Use after solving bugs, discovering patterns, making decisions, or completing complex features.
Create distinctive, production-grade frontend interfaces. Use when building web components, pages, dashboards, React components, HTML/CSS layouts, or styling any web UI. Generates creative, polished code that avoids generic AI aesthetics.
Create structured requirement documents from user ideas. Use when capturing new features, tasks, or user stories that need documentation in requirement/INDEX.md.
Guide for creating effective skills. Use when creating a new skill or updating an existing skill that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.