Skip to main content

python-code-reviewer

Review Python backend services, pull requests, diffs, and snippets for production-risk bugs in asyncio, async/await, GIL, exception handling, type hints, SQLAlchemy/Django ORM, FastAPI/aiohttp, dependencies, security, and microservice architecture — focusing on capital-loss, data-corruption, authorization-bypass, and incident-causing defects. Use for asyncio event-loop blocking, requests-inside-async, pickle.loads, SQLAlchemy N+1, and incident-blocking PR review. Do NOT use for: PEP 8 style nits, type-hint pedantry, or non-incident review.

来源信息

仓库
liyown/superpower-enterprise
最近来源活动
2026年6月10日 03:35
检测到的 SKILL.md 语言
英语
星标
1
分支
0

安装方式

默认使用会先检查来源的 Prompt;你也可以切换为直接命令,或下载本地副本。

检查来源文件

决定是否安装前,请先阅读 SKILL.md,以及 SkillsMP 当前展示的配套文件。

文件资源管理器
20 个文件

正在显示 SKILL.md

SKILL.md
来源说明 · 只读预览
name
python-code-reviewer
description
Review Python backend services, pull requests, diffs, and snippets for production-risk bugs in asyncio, async/await, GIL, exception handling, type hints, SQLAlchemy/Django ORM, FastAPI/aiohttp, dependencies, security, and microservice architecture — focusing on capital-loss, data-corruption, authorization-bypass, and incident-causing defects. Use for asyncio event-loop blocking, requests-inside-async, pickle.loads, SQLAlchemy N+1, and incident-blocking PR review. Do NOT use for: PEP 8 style nits, type-hint pedantry, or non-incident review.
# Python Code Reviewer Review Python backend code for real production risk. Keep the entrypoint small and load scenario prompts only when the code needs them. ## Required Loading Always load `prompts/reviewer.md`. Load additional prompts only when relevant: - `prompts/async-reviewer.md`: asyncio, event loop, blocking calls, task groups, cancellation, GIL, shared state. - `prompts/error-reviewer.md`: exception types, raise from, swallowing exceptions, logging, context managers, `__exit__` exceptions. - `prompts/sql-reviewer.md`: SQLAlchemy, Django ORM, async sessions, N+1, transactions, connection pool. - `prompts/web-reviewer.md`: FastAPI, aiohttp, Django, middleware, timeouts, request lifecycle, streaming. - `prompts/security-reviewer.md`: authorization, tenant isolation, injection, deserialization, secrets, SSRF. ## Review Contract - Find concrete bugs, not generic advice. - Bind every finding to code evidence and an execution path. - Mark uncertain findings as `需要结合上下文确认`. - Do not output style comments unless they hide a real defect. - If no clear high-risk issue is found, output exactly: ```text 未发现明确高风险问题。 ``` Use the severity and output contract from `prompts/reviewer.md`. ## Examples Each bad example has a matching `good-<file>` in this same `examples/` directory that shows the minimal fix for every Critical/High finding. Read both side by side when triaging a real diff.
在 GitHub 查看