Agent Skills
› KhazP/vibe-coding-prompt-template
› vibe-review
vibe-review
GitHub对代码变更进行深度审查，结合需求、回归测试及安全风险分析。追踪行为影响，识别缺陷、权限漏洞及数据暴露风险，提供具体修复建议，区分已证实问题与证据缺失，确保正确性优先。
触发场景
需要审查代码变更是否符合需求和规范
评估变更引入的回归风险或安全问题
安装
npx skills add KhazP/vibe-coding-prompt-template --skill vibe-review -g -y
SKILL.md
Frontmatter
{
"name": "vibe-review",
"description": "Review a proposed change against requirements, regressions, verification evidence, and relevant security risks.",
"allowed-tools": "Read, Glob, Grep, Bash"
}
Vibe Review
Read the actual diff, applicable instructions, acceptance criteria, and check results. Trace changed behavior into its callers and tests. Look for concrete regressions, missing error handling, incorrect assumptions, and relevant authorization or data exposure issues.
Report actionable findings with file/line, trigger, impact, and suggested correction. Distinguish demonstrated defects from missing evidence. Prioritize correctness and scope over cosmetic preferences. Do not claim independent checks unless you ran them. If there are no findings, say so and disclose remaining verification gaps. Review does not authorize unrelated edits or publication.
版本历史
- b00eb84 当前 2026-09-08 23:13
