菜单
Closeout code review with a structured second-model pass. Use after non-trivial changes or when the user asks for autoreview, Codex review, or a review panel.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/vana-com/vana-sdk --skill autoreview命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | autoreview |
| description | Closeout code review with a structured second-model pass. Use after non-trivial changes or when the user asks for autoreview, Codex review, or a review panel. |
Run the repo's bundled structured review helper after the nearest owning proof.
Codex is the default reviewer; set AUTOREVIEW_ENGINE=claude (or pass
--engine claude) when Codex is unavailable. Review findings are advisory; the
task, owning code and contracts, and their nearest checks remain authoritative.
Record the baseline: user request, violated invariant, owner boundary, intended behavior, and target ref. Completion means a finding can be classified without silently broadening the task.
Run the nearest focused checks with the repo's own scripts. Completion means the pre-review proof is current. Full proof for this repo:
npm run typecheck && npm run lint && npm test
npm run typecheck, npm run lint, npm test, npm run validate (lint + typecheck + coverage, what CI runs).npm run format:check (Prettier over the repo, Markdown included) is enforced by lint-staged on commit.cd packages/vana-sdk && npx vitest run src/<file>.test.ts.npm run typecheck && npm test yourself, then push with git push --no-verify.Select the review target:
# Dirty staged, unstaged, and untracked work
.agents/skills/autoreview/scripts/autoreview --mode local
# Feature/PR branch; PRs in this repo target main
.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main
# One committed change
.agents/skills/autoreview/scripts/autoreview --mode commit --commit HEAD
# Exact commit-to-commit diff (no merge-base expansion)
.agents/skills/autoreview/scripts/autoreview --mode range --base <base> --head <head>
For an open PR, use its actual base (the helper asks gh pr view when no
--base is given). Branch mode requires a clean worktree; local changes
belong in local mode. Commit mode reviews merge commits against their first
parent. A clean local review proves only that no local patch exists.
Adjudicate every finding against the real code path, adjacent files, dependency contracts, and repo doctrine. Completion means each finding is accepted with evidence or rejected with a one-line reason.
Classify accepted findings before editing:
After an in-scope fix, rerun affected focused proof and autoreview. After two review-triggered patch cycles without convergence, pause and reclassify all remaining findings. Continue only when every remaining item is still an in-scope blocker.
Stop on the first clean helper exit. Report the command, proof run, accepted/rejected findings, and clean result.
The helper defaults to P0: issues that block the current change because they materially break its normal flow, outcome, or safety boundary. Broaden only on explicit request:
.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main --max-priority P1
P2/P3 polish and speculative hardening are not blockers by default. Security findings must name a concrete risk or removed safety check; security-adjacent functionality alone is not a defect.
main; semantic-release publishes from main, so the PR title must be a conventional commit. Review never authorizes push, merge, release, or tag
actions.Panels are opt-in. Use them only when requested or when the risk justifies the extra cost:
.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main --panel
The main agent still adjudicates every merged finding. Never push merely to make a review possible.
The helper's target-selection logic has unit tests; run them after editing the script:
python3 .agents/skills/autoreview/tests/test_autoreview.py
scripts/test-review-harness builds a throwaway repo with a deliberately unsafe
patch (or a safe security-adjacent one) and checks that a selected engine
reports, or correctly does not report, findings.