菜单
Use when reviewing a code diff, pull request, or local changes for buy-vs-build mistakes, avoidable custom code, unnecessary dependencies, missed built-ins, missed platform features, or weak decision notes.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when evaluating whether to adopt a specific open-source or commercial dependency (npm/PyPI/etc. package or library) — to research its fit, maintenance and health, security and supply-chain risk, license, and footprint before taking it on.
Use when choosing between options at the same ownership rung — a transport, API style, data store, job/async mechanism, integration pattern, or cache — and you want the one that fits the requirement's real shape (directionality, volume, latency, consistency, failure mode) rather than the most powerful, popular, or familiar default.
Use when coding, designing an implementation, choosing dependencies, adding features, reviewing diffs for custom code, evaluating whether to use built-ins, standard libraries, native platform features, installed packages, open source libraries, commercial services, or an in-house implementation.
Use when a non-obvious buy-vs-build decision was just made and should be recorded durably, or when a project keeps a docs/decisions/ log of Architecture Decision Records (ADRs) for build/buy/reuse and dependency choices.
Use when choosing between built-ins, standard libraries, native platform features, installed packages, open source libraries, commercial products, or in-house implementation for a feature or technical design.
Use when coding, designing implementations, choosing dependencies, or reviewing whether a task should use built-ins, platform features, installed packages, open source, commercial services, or in-house code.
| name | buy-vs-build-review |
| description | Use when reviewing a code diff, pull request, or local changes for buy-vs-build mistakes, avoidable custom code, unnecessary dependencies, missed built-ins, missed platform features, or weak decision notes. |
Review the diff for ownership choices, not just correctness. Prefer findings that reduce risk, code, dependencies, or vendor lock-in without weakening safety.
docs/decisions/ ADR) should name the distinguishing requirement, the rejected option, and a revisit trigger. A missing or vague note is itself a finding — it is often the most valuable thing in the change, because it is what makes the tradeoff reviewable later.Use this shape:
Findings
- [severity] file:line - Issue. Better option: <rung>. Tradeoff: <why>.
Integration
- [severity] file:line - Right option, but: <unused capability / unhandled failure mode / glue code that outweighs the reuse>.
Decision gaps
- Missing or vague decision note for <choice> — name the distinguishing requirement, rejected option, and revisit trigger.
If there are no issues, say so and list any residual dependency or ownership risks.