Source profileQuality 57/100

yun520-1/mark-heartflow-skill/skills/cody/SKILL.md

code-review-assistant

Use it for code review and engineering tasks; the detail page covers purpose, installation, and practical steps.

Source repository stars
36
Declared platforms
0
Static risk flags
0
Last source update
2026-07-28
Source checked
2026-07-28
DecisionCompatibilityInstallWorkflowPermissionsEvidenceSource

Decision brief

What it does—and where it fits

代码 Review 助手。分析 Git diff 或代码片段，输出结构化中文 Review 报告，覆盖 Bug、安全漏洞、性能问题、可读性、最佳实践、类型安全、错误处理、测试覆盖。支持严格程度配置（信息/优化/标准/严重）和多种主流语言（Python/JS/TS/Java/Go/Rust）。支持 GitHub/GitLab PR diff 获取，支持 Markdown/JSON/HTML 多种输出格式。使用场景：用户说"帮我 review 代码"、"检查这段代码"、"review 一下最近的改动"、"review 这个 PR"、"看看这个 diff 有没有问题"、"代码审查"、"code review"、"严格模式 review"、"快速 review"。

Best for

    Not for

    • Tasks that require unconfirmed production actions or broad system permissions.
    • Environments where the pinned source and install steps cannot be inspected.

    Compatibility matrix

    Platform support, with evidence labels

    PlatformStatusEvidenceWhat to check
    CodexNot declaredNo explicit evidencePortability before use
    Claude CodeNot declaredNo explicit evidencePortability before use
    CursorNot declaredNo explicit evidencePortability before use
    Gemini CLINot declaredNo explicit evidencePortability before use
    Open the compatibility checker

    Installation

    Inspect first. Install second.

    The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

    Source-detected install commandSource
    npx skills add https://github.com/yun520-1/mark-heartflow-skill --skill "skills/cody"
    Safe inspection promptEditorial

    Inspect the Agent Skill "code-review-assistant" from https://github.com/yun520-1/mark-heartflow-skill/blob/20bbbb4eacf56c941ddc3420dcbc81c04d55ec5c/skills/cody/SKILL.md at commit 20bbbb4eacf56c941ddc3420dcbc81c04d55ec5c. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

    Workflow

    What the source asks the agent to do

    1. 01

      工作流程

      1. PR diff（最高优先级）：运行 scripts/getprdiff.py，支持 GitHub/GitLab 2. Git diff：运行 scripts/getdiff.py 获取本地变更 3. 用户粘贴：直接分析用户提供的代码片段或 diff 文本 4. 指定文件：读取用户指定的文件内容

      PR diff（最高优先级）：运行 scripts/getprdiff.py，支持 GitHub/GitLabGit diff：运行 scripts/getdiff.py 获取本地变更用户粘贴：直接分析用户提供的代码片段或 diff 文本
    2. 02

      第一步：获取代码

      1. PR diff（最高优先级）：运行 scripts/getprdiff.py，支持 GitHub/GitLab 2. Git diff：运行 scripts/getdiff.py 获取本地变更 3. 用户粘贴：直接分析用户提供的代码片段或 diff 文本 4. 指定文件：读取用户指定的文件内容

      PR diff（最高优先级）：运行 scripts/getprdiff.py，支持 GitHub/GitLabGit diff：运行 scripts/getdiff.py 获取本地变更用户粘贴：直接分析用户提供的代码片段或 diff 文本
    3. 03

      第二步：确认严格程度

      详见 references/severity-guide.md。

      详见 references/severity-guide.md。

    Permission review

    Static risk signals and limitations

    No configured static risk pattern was detected

    This is not proof of safety. Runtime behavior, indirect dependencies, and hidden external systems are outside the static scan.

    Evidence record

    Why each signal appears

    EvidenceSourceComputedTestedEditorial
    SignalValueEvidence typeMeaning
    Quality score57/100ComputedDocumentation, specificity, maintenance, and trust rules
    Repository stars36SourceRepository attention, not individual Skill quality
    Compatibility0 platformsSourceDeclared in the catalog source record
    Usage guidecatalog recordEditorialGenerated or reviewed according to the visible evidence level

    Pinned source

    Provenance and original SKILL.md

    Repository
    yun520-1/mark-heartflow-skill
    Skill path
    skills/cody/SKILL.md
    Commit
    20bbbb4eacf56c941ddc3420dcbc81c04d55ec5c
    License
    Not declared
    Collected
    2026-07-28
    Default branch
    main
    View the original SKILL.md

    代码 Review 助手

    工作流程

    第一步：获取代码

    按优先级尝试以下方式：

    1. PR diff（最高优先级）：运行 scripts/get_pr_diff.py，支持 GitHub/GitLab
    2. Git diff：运行 scripts/get_diff.py 获取本地变更
    3. 用户粘贴：直接分析用户提供的代码片段或 diff 文本
    4. 指定文件：读取用户指定的文件内容

    第二步：确认严格程度

    若用户未指定，默认使用标准模式。

    模式触发词检查范围
    🔵 信息快速 review、简单看看命名规范、注释完整性
    🟢 优化-（默认最低）可读性问题、最佳实践
    🟡 建议标准 review+ 性能问题、明显 Bug
    🔴 严重严格模式、PR review+ 安全漏洞、严重 Bug

    详见 references/severity-guide.md。

    第三步：执行分析

    按以下维度检查，详细规则见 references/review-dimensions.md：

    • 🐛 潜在 Bug — 空指针、越界、异常处理、类型错误
    • 🔒 安全问题 — SQL 注入、XSS、硬编码密钥、权限校验
    • ⚡ 性能问题 — N+1 查询、不必要循环、低效数据结构
    • 📖 可读性 — 过长函数、魔法数字、晦涩命名
    • ✅ 最佳实践 — DRY 原则、错误处理一致性
    • 🧪 类型安全 — 类型注解、隐式转换
    • 🛡️ 错误处理 — 异常捕获、返回值校验
    • 🧪 测试覆盖 — 关键逻辑缺少测试提示

    第四步：语言特定规则

    根据代码语言加载对应规则：references/languages/ 目录下包含：

    • python.md — Python 特定检查
    • javascript.md — JavaScript/TypeScript 检查
    • go.md — Go 语言检查
    • java.md — Java 检查
    • rust.md — Rust 检查

    第五步：输出报告

    支持三种格式，默认 Markdown：

    • Markdown（默认）：适合直接阅读和分享
    • JSON：适合 CI 集成和二次处理，使用 --format json
    • HTML：适合生成可分享的报告，使用 --format html

    输出模板见 references/report-template.md。

    快速参考

    用户说对应操作
    "review 最近的提交"get_diff.py --commits HEAD~1
    "review 和 main 的差异"get_diff.py --branch main
    "review GitHub PR #123"get_pr_diff.py --provider github --pr 123
    "严格模式 review"启用 🔴 严重模式
    "快速看看"启用 🔵 信息模式
    "输出 JSON"使用 JSON 模板
    "生成 HTML 报告"使用 HTML 模板

    注意事项

    • 优先给出可操作的改进建议，不只是指出问题
    • 每条意见附带具体行号（如能定位）
    • 中文输出，技术术语保留英文原词
    • 若 diff 超过 500 行，按文件分批处理，每批处理完询问是否继续
    • 使用语言特定规则时，先识别代码语言再加载对应检查项

    Alternatives

    Compare before choosing

    Computed 8938,313

    wshobson/agents

    python-design-patterns

    Python design patterns including KISS, Separation of Concerns, Single Responsibility, and composition over inheritance. Use this skill when designing a new service or component from scratch and choosing how to layer responsibilities, when refactoring a God class or monolithic function that has grown too large, when deciding whether to add a new abstraction or live with duplication, when evaluating a pull request for structural issues like tight coupling or leaking internal types, when choosing b

    2026-07-220 platforms
    Computed 8838,313

    wshobson/agents

    code-review-excellence

    Master effective code review practices to provide constructive feedback, catch bugs early, and foster knowledge sharing while maintaining team morale. Use when reviewing pull requests, establishing review standards, or mentoring developers.

    2026-07-220 platforms
    Computed 7024,265

    openai/skills

    security-best-practices

    Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

    2026-07-140 platforms
    Computed 6936

    yun520-1/mark-heartflow-skill

    pr-reviewer

    Automated GitHub PR code review with diff analysis, lint integration, and structured reports. Use when reviewing pull requests, checking for security issues, error handling gaps, test coverage, or code style problems. Supports Go, Python, and JavaScript/TypeScript. Requires `gh` CLI authenticated with repo access.

    2026-07-280 platforms