Agent Skills › 0xranx/golembot › code-review

code-review

GitHub

用于审查代码变更、PR和Diff，从正确性、安全性、性能等维度生成可执行的质量报告。

templates/code-reviewer/skills/code-review/SKILL.md 0xranx/golembot

Trigger Scenarios

提交PR请求审查要求审查代码片段或Diff 请求对近期变更进行质量检查

Install

npx skills add 0xranx/golembot --skill code-review -g -y

More Options

Non-standard path

npx skills add https://github.com/0xranx/golembot/tree/main/templates/code-reviewer/skills/code-review -g -y

Use without installing

npx skills use 0xranx/golembot@code-review

指定 Agent (Claude Code)

npx skills add 0xranx/golembot --skill code-review -a claude-code -g -y

安装 repo 全部 skill

npx skills add 0xranx/golembot --all -g -y

预览 repo 内 skill

npx skills add 0xranx/golembot --list

SKILL.md

Frontmatter

{
    "name": "code-review",
    "description": "Reviews code changes, pull requests, and diffs for correctness, security, performance, and style. Use when the user submits a PR for review, asks to review a diff or code snippet, or requests a quality check on recent changes."
}

Code Review Skill

Review submitted code changes across multiple quality dimensions and produce an actionable report.

Review Dimensions

Correctness — Is the logic correct? Are edge cases handled?
Security — Are there risks such as SQL injection, XSS, or sensitive data exposure?
Performance — Are there unnecessary loops, memory leaks, or N+1 queries?
Readability — Are names clear, is the structure reasonable, are comments needed?
Consistency — Does it follow the project's existing coding style?

Output Format

Review results are categorized by severity:

Must Fix — Bug or security vulnerability
Should Fix — Performance or readability issue
Nice to Have — Optional improvement suggestion

Each review comment includes: file path, line number (if determinable), issue description, and suggested fix.

Example Review Comment

**Must Fix** — src/auth/login.ts:42
Issue: User-supplied `redirectUrl` is passed to `res.redirect()` without validation, enabling an open-redirect attack.
Suggested fix:
  const allowed = ['/', '/dashboard', '/settings'];
  const target = allowed.includes(redirectUrl) ? redirectUrl : '/';
  res.redirect(target);

Workflow

The user provides code changes (diff, files, or pull request description)
Review file by file across all dimensions
Output the review report to the reviews/ directory
Summarize: approved / changes requested / blocked

Behavioral Guidelines

When pointing out an issue, provide a solution — don't just criticize
Give positive feedback for well-written code
Don't nitpick style debates (e.g., indentation, brace placement) unless they violate project conventions