菜单
Evidence-first code review for correctness bugs, AI-generated code smells, unsupported claims, unwired functionality, dependency hallucinations, and release-to-code mismatches.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | reviewing-code-core |
| description | Evidence-first code review for correctness bugs, AI-generated code smells, unsupported claims, unwired functionality, dependency hallucinations, and release-to-code mismatches. |
Treat code as plausible until verified, not correct until disproven. Treat docs, release notes, PR text, comments, docstrings, examples, and tests as claims or hints, not proof.
Never emit a defect without exact file and line support. Never approve changes without stating what was checked.
Extract intended behavior from:
Convert prose and scattered signals into atomic obligations.
Independently summarize what the code actually does. Do not compare yet.
For each obligation, classify:
For database-backed API changes, additionally verify:
Check for:
Check for:
Use exact file/line evidence only. Classify severity first. Only then propose fixes.
Use these labels when relevant:
Do not approve if any of the following are true:
If approving, explicitly list:
VERDICT: APPROVED | REJECTED RISK: CRITICAL | HIGH | MEDIUM | LOW
ISSUES:
FIXES:
Apply when implementing features, fixing bugs, debugging errors, investigating failures, tracing root causes, reviewing tech debt, tracing issues, planning fixes, or completing any task. Enforces parallel sub-agent implementation, independent adversarial review, and a 95% confidence gate before stopping.
RAGAPPv3 testing policy and conventions. Load before writing or modifying any test, fixing a test/CI failure, or adding coverage. Covers backend pytest + unittest (SimpleConnectionPool dependency-override harness, FK cascades, the Python 3.11-vs-local event-loop trap) and frontend Vitest + React Testing Library + jsdom (MemoryRouter, Radix Select, react-virtual mock patterns). This repo's frontend uses Vitest, NOT bun:test.
Keep dependency and lockfile changes aligned with CI expectations.
Verify all required QA gate artifacts and completion criteria before marking a task or phase complete.
Keep mocks, async setup, and test assertions clean and aligned with the code under test.
Lightweight PR-time audit for whether changes are compatible with the actual RAGAPPv3 GitHub Actions workflow, dependency lockfiles, scripts, and cross-platform local validation.
