菜单
Review Java code for language and runtime conventions: concurrency, exceptions, try-with-resources, API versioning, collections and Streams, NIO, and testability. Language-only atomic skill; output is a findings list.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Store, look up, or delete a personal credential (server SSH password, database password, website login, API key/token, certificate passphrase) in the macOS Keychain using a consistent <project>-<env>-<kind> naming scheme, and optionally record a pointer (never the secret itself) in the current project's Claude Code memory. Always use this skill whenever the user asks to save, store, remember, look up, rotate, or delete a password, API key, token, SSH credential, or database credential on this machine — even if they don't say "Keychain" or "security" explicitly, e.g. "save this database password so I don't lose it", "把这个数据库密码存一下", "记一条密钥", "这台服务器的密码帮我记下来", "what's the postgres password for staging again", "delete the old GitHub token from keychain". Do not use this for team-shared secret vaults, CI/CD secret injection, or anything that needs to sync across machines — those need a real secrets manager, not this skill.
Drain pending NATS messages from a producer contract via NATS MCP tools. Discovers the available NATS tool capabilities, selects exact-subject or wildcard mode from .cortex/nats.yaml, applies Tolerant Reader semantics, executes ack/nak/term decisions, and returns aggregated stats.
Audit and refactor existing SKILLs to meet spec compliance, repository asset boundaries, tool adaptation requirements, and LLM best practices.
From inside a linked worktree, deliver the current feature branch into main — merge with --no-ff, push, and optionally clean up the worktree, all without leaving CWD.
After code changes, auto-detect the project's build system and local deployment method for a given directory, then build the project and restart its locally-deployed environment (Docker Compose / systemd / process manager). Never assumes — asks only when detection is ambiguous. Caches detected commands per project in .cortex/redeploy-local.yaml; re-invocations on the same project skip re-scanning until signal files change, the cache expires (30 days), or the skill version bumps.
From the main repo on the main branch, scan all linked worktrees and local branches, let the user multi-select, then merge --no-ff + push them sequentially and clean up succeeded worktrees together.
| name | review-java |
| description | Review Java code for language and runtime conventions: concurrency, exceptions, try-with-resources, API versioning, collections and Streams, NIO, and testability. Language-only atomic skill; output is a findings list. |
| description_zh | 按 Java 语言与运行时规范审查代码：并发、异常、try-with-resources、API 版本、集合与 Stream、NIO、可测性。 |
| tags | ["code-review","language"] |
| version | 1.0.0 |
| license | MIT |
| recommended_scope | project |
| metadata | {"author":"ai-cortex"} |
| triggers | ["review java"] |
| input_schema | {"type":"code-scope","description":"Source files or directories to review"} |
| output_schema | {"type":"findings-list","description":"Zero or more findings with location, category, severity, and suggestion"} |
仅检查 Java 中的代码的 语言和运行时约定。不要定义范围（差异与代码库）或执行安全/架构分析；这些是通过范围和cognitive技能来处理的。以标准格式发出结果列表以进行聚合。重点关注并发和线程安全、异常和资源尝试、API 和版本兼容性、集合和流、NIO 和正确关闭、相关模块 (JPMS) 以及可测试性。
首要目标：生成 Java 语言/运行时结果列表，涵盖给定代码范围的并发性、异常、资源管理、API 兼容性、集合/流、NIO 和可测试性。
成功标准（必须满足所有要求）：
language-java）、严重性、标题、描述和可选建议验收测试：输出是否包含以 Java 为中心的结果列表，其中包含 file:line 引用，涵盖所有相关语言/运行时维度，而无需执行安全性、架构或范围分析？
本技能负责：
本技能不负责：
review-sql转交点：当所有 Java 发现结果发布后，将其交给“orchestrate-code-review”进行聚合。对于 Java 代码中发现的 SQL 或安全问题，请记下它们并建议适当的cognitive技能。
何时使用：当正在审查的代码是 Java 并且任务包括语言/运行时质量时。范围由调用者或用户确定。
不要做这些（其他技能可以处理它们）：
review-sql何时停止并交接：
language-java）、严重性、标题、描述和可选建议输出是否包含以 Java 为中心的结果列表，其中包含涵盖所有相关语言/运行时维度的 file:line 引用，而无需执行安全性、体系结构或范围分析？